CVE-2026-87455
Description
A flaw was found in Aura in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox.
Statement
This vulnerability is rated as Important because successful exploitation permits code execution beyond the client sandbox boundaries, threatening the host system's integrity. While social engineering or user interaction is necessary to direct a victim to malicious content, the breach of isolation elevates the impact beyond Moderate. Additionally, the affected Chromium browser component is not provided in core Red Hat Enterprise Linux offerings, being maintained strictly within community-supported channels such as EPEL and Fedora.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
