CVE-2026-78904

A flaw was found in ANGLE. A type confusion vulnerability in ANGLE, a graphics abstraction layer used in Google Chrome, allows a remote attacker to exploit the flaw. By crafting a malicious HTML page, the attacker can trigger this vulnerability. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, compromising the affected system.

Critical severity is assigned because an attacker can achieve remote code execution that breaks out of the client sandbox, potentially compromising the host system. In Red Hat Enterprise Linux environments, exposure is primarily confined to desktop or workstation installations running applications that embed WebKitGTK to render untrusted web content. Standard server deployments without graphical rendering engines are not exposed, and standalone Mozilla applications such as Firefox and Thunderbird do not include the vulnerable ANGLE component.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.