Bug 2556889 (CVE-2026-113049)

Summary: CVE-2026-113049 chromium-browser: chromium-browser: arbitrary code execution via a crafted HTML page
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page, causing memory corruption. Successful exploitation may allow the attacker to execute arbitrary code within the browser's sandbox, an isolated security environment intended to protect the underlying operating system.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2558579    
Bug Blocks:    

Description OSIDB Bzimport 2026-10-20 22:50:47 UTC
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)