CVE-2026-113343
개요
A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code execution within the sandbox.
내용
Red Hat rates this flaw as Important because remote attackers can achieve arbitrary code execution within the constrained browser process, jeopardizing active session confidentiality and providing a foothold for further escalation. The issue requires a user to navigate to an untrusted web page, which represents standard browser interaction. Exposure in enterprise environments is limited as Chromium is distributed through Fedora and EPEL rather than the default Red Hat Enterprise Linux system image.
취약점 이해 (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
