CVE-2026-79131

A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system.

This vulnerability is rated as Critical severity for Red Hat Enterprise Linux because an unauthenticated remote adversary can break out of the rendering sandbox to achieve full code execution with the permissions of the logged-in user. The scope change and potential for system compromise elevate the risk beyond Moderate or Important bands. In typical Red Hat deployments, exposure is largely confined to desktop workstations or environments running graphical utilities that embed WebKitGTK, leaving default minimal server installations unexposed unless they actively render external web content. Successful exploitation still mandates user interaction, requiring a target to load malicious web content in a vulnerable application.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.