CVE-2026-79019

A flaw was found in ANGLE, a graphics abstraction layer used in Chromium-based browsers. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox.

This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can achieve arbitrary code execution outside the rendering sandbox by enticing a user to view malicious web content. In Red Hat Enterprise Linux, the affected graphics translation components are delivered through client-facing web rendering packages such as webkit2gtk3, leaving minimal and headless server deployments unaffected in default configurations. Exposure is therefore limited to environments running graphical applications or desktop sessions that process untrusted external web resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.