CVE-2026-113275
Description
A flaw was found in Chromium. A use-after-free memory vulnerability in an application programming interface (API) allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to load a specially crafted HTML page.
Statement
This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can achieve code execution if a user is tricked into navigating to a malicious web page, though the blast radius is restricted within the browser sandbox environment. Chromium is not shipped as part of core Red Hat Enterprise Linux and is only distributed through EPEL and Fedora repositories. Standard server deployments without desktop components or third-party web browsers remain unaffected.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
