CVE-2026-93372
Description
A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser's security sandbox due to a buffer overflow in the Web Graphics Library (WebGL) component. An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web page.
Statement
An IMPORTANT-rated flaw was found in the Web Graphics Library (WebGL) component of the Chromium browser. A remote attacker could exploit a buffer overflow in WebGL by enticing a user to visit a specially crafted web page, resulting in arbitrary code execution outside the browser's security sandbox. Within Red Hat's portfolio, this flaw affects only the Chromium browser packages shipped in the Fedora and EPEL community streams, where resolution is delegated to the community maintainers and a fix is being pursued through updated Chromium package releases; no Red Hat Enterprise Linux products are listed as affected. Upstream Google rates this issue as Critical, while Red Hat rates the impact as IMPORTANT (CVSS 9.6, CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users of the Chromium packages in Fedora and EPEL are advised to update to the latest Chromium packages available through their distribution updates.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
