CVE-2026-87554
Description
A flaw was found in Chromoting. This vulnerability, a race condition, allows a local attacker to execute arbitrary code outside of the sandbox environment. By exploiting this flaw with a local program, an attacker could gain unauthorized control over the affected system.
Statement
This vulnerability is rated as Important rather than Moderate because a successful exploit breaks out of the application sandbox to execute arbitrary code on the underlying host. However, Chromium is not shipped or supported within Red Hat Enterprise Linux, existing only in community-supported repositories such as Fedora and EPEL. Furthermore, upstream reports indicate this race condition specifically affects the Windows implementation of Chromoting, presenting no direct exposure to enterprise Linux platforms.
Understanding the Weakness (CWE)
Integrity,Confidentiality
Technical Impact: Modify Application Data; Read Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
