CVE-2026-78910
Description
A flaw was found in chromium-browser. A remote attacker could exploit a buffer overflow vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment.
Statement
Red Hat Product Security rates the severity of this vulnerability as Important because exploitation enables remote code execution inside the application's sandbox without authentication. The overall risk is moderated by the requirement for user interaction, as a target must be convinced to navigate to untrusted web content. Furthermore, Chromium is not packaged or shipped in supported Red Hat Enterprise Linux releases, existing only in Fedora and EPEL community channels.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
