CVE-2026-79048

A flaw was found in ANGLE, a graphics abstraction layer used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code within the sandbox environment.

Red Hat has evaluated this vulnerability as having an Important severity rating because an unauthenticated remote attacker could achieve code execution inside the renderer sandbox upon tricking an end user into viewing malicious web content, which elevates the risk above Moderate despite requiring user interaction. In typical Red Hat Enterprise Linux environments, web rendering engines operate under process isolation, restricting the blast radius of renderer-level memory corruptions and preventing broader system compromise without a secondary exploit. Additionally, upstream advisories indicate that this defect is specific to implementations running on Windows platforms, substantially reducing practical exposure on Linux distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.