CVE-2026-76046

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of the affected system.

Red Hat rates this vulnerability as Important because an attacker can escape browser process isolation and achieve arbitrary code execution with the permissions of the local user. Although this flaw allows a sandbox escape, it is rated Important rather than Critical due to requiring user interaction to process untrusted web content alongside a previously compromised rendering engine. On Red Hat Enterprise Linux, this impact is primarily restricted to desktop environments and applications utilizing WebKitGTK, leaving default headless server installations unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.