CVE-2026-79043

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of the affected system.

This vulnerability is rated as Critical severity because an unauthenticated remote attacker can escape sandbox isolation to execute arbitrary code with the privileges of the desktop user upon parsing malicious web content. In Red Hat Enterprise Linux environments, exposure is primarily confined to graphical desktop installations or client applications embedding the WebKitGTK rendering engine, as default server deployments do not process web pages. Other browser packages provided in Red Hat distributions, such as Mozilla Firefox, do not include the vulnerable ANGLE code and are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.