CVE-2026-87481
Description
A flaw was found in WebView in Google Chrome. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially execute arbitrary code outside of the security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a bypass of security restrictions.
Statement
This vulnerability is rated Important due to the high blast radius of a sandbox escape, which could permit arbitrary code execution within the host context following an initial renderer compromise. However, this flaw specifically targets the Android WebView component, which is not packaged or supported in Red Hat Enterprise Linux. As a result, standard enterprise deployments are not exposed to this issue under default operating conditions.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
