CVE-2026-78965

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure.

Red Hat has evaluated this vulnerability as having an Important security impact because an unauthenticated remote attacker could compromise confidentiality by bypassing same-origin security boundaries to access cross-origin data. In Red Hat Enterprise Linux, this issue affects WebKitGTK when rendering web pages in graphical applications that utilize the embedded ANGLE graphics translation layer. Successful exploitation requires a user to load hostile web content, meaning that headless server installations without graphical browsing capabilities remain unaffected in standard deployment configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.