CVE-2026-113270
Description
A flaw was found in chromium-browser. A remote attacker can execute arbitrary code outside the browser sandbox by tricking a user into loading a specially crafted HTML page. This issue is caused by a use-after-free memory corruption vulnerability within the Internals component.
Statement
Red Hat rates this vulnerability as Important because successful exploitation allows an untrusted HTML page to escape browser sandbox containment and execute arbitrary code in the context of the logged-in user. Although exploitation requires user interaction to browse to a malicious site, the ability to bypass sandboxing and achieve host-level execution elevates the severity above Moderate. Chromium is not shipped in core Red Hat Enterprise Linux releases and is only maintained through Fedora and Extra Packages for Enterprise Linux (EPEL) repositories.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
