CVE-2026-79130

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit this buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox, potentially compromising the affected system.

This vulnerability is rated as having Critical impact because it allows an unauthenticated remote adversary to escape sandbox restrictions and execute arbitrary commands in the context of the user running the browser or rendering engine. In Red Hat Enterprise Linux, WebKitGTK packages embed the vulnerable graphics translation layer and are primarily consumed by desktop environments and graphical helper applications. Typical server installations without graphical user interfaces do not expose this surface, but workstation deployments and users processing untrusted web content remain susceptible to compromise upon navigating to a hostile webpage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.