CVE-2026-113003
Description
A flaw was found in the Human Interface Device (HID) component of Chromium. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to execute arbitrary code within the browser sandbox.
Statement
This vulnerability is rated as Important rather than Moderate because an unauthenticated remote adversary can achieve arbitrary code execution inside the client sandbox without prior system privileges, requiring only user interaction. While Chromium is not included in core Red Hat Enterprise Linux releases, it is packaged and distributed through community channels such as EPEL and Fedora. Exploitation is constrained to the browser process boundaries, preventing direct host compromise unless chained with a separate sandbox bypass.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
