CVE-2026-79127

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code outside of the browser's security sandbox, leading to a compromise of the affected system.

This vulnerability is rated as Critical because an attacker can achieve arbitrary code execution outside the browser sandbox upon rendering malicious content, completely bypassing process isolation. In Red Hat Enterprise Linux, the affected WebKitGTK libraries are primarily consumed by graphical desktop applications rather than headless server services. Systems running desktop sessions or client applications processing untrusted web content face significant exposure, whereas standard server installations lacking graphical interfaces are not exposed in default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.