CVE-2026-79247
Description
A flaw was found in Chromoting in Google Chrome. A remote attacker, after compromising the renderer process, could exploit a use-after-free vulnerability by sending crafted network traffic. This could lead to arbitrary code execution outside of the sandbox.
Statement
This vulnerability is rated as Important because sandbox escape and host-level code execution are possible, despite the requirement of an already compromised renderer process. Red Hat Enterprise Linux does not package Chromium or its remote desktop features in core distributions, leaving standard enterprise deployments unexposed. Impact is restricted to community distributions such as Fedora or environments where EPEL packages have been explicitly installed.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
