CVE-2026-113327
Description
A flaw was found in the Chromecast component of Chromium. This vulnerability is caused by a use-after-free condition, which occurs when the application attempts to reference memory after it has been released. A remote attacker could exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's restricted sandbox environment.
Statement
This vulnerability is rated as Important severity because an unauthenticated remote attacker could achieve code execution inside the client sandbox if a user renders malicious content. Red Hat Enterprise Linux is not directly affected as the Chromium browser is not packaged within supported core RHEL repositories, being distributed solely through community offerings such as Fedora and EPEL. Furthermore, the blast radius is restricted to the browser sandbox, meaning full compromise of the underlying system would require an accompanying sandbox breakout.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
