CVE-2026-87492
Description
A flaw was found in DevTools in Google Chrome. This incorrect authorization vulnerability allows a remote attacker to potentially execute arbitrary code outside the browser's security sandbox. The exploitation occurs when a user interacts with a specially crafted HTML page, leading to a severe compromise of the system.
Statement
Red Hat rates this vulnerability as Important severity because successful exploitation enables sandbox escape and arbitrary code execution in the context of the active user. Exploitation requires user interaction, specifically convincing a user to navigate to an untrusted web page while developer tools are active. Core Red Hat Enterprise Linux releases do not ship Chromium, limiting exposure primarily to community and workstation environments where the package is installed.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
