CVE-2026-79138

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in ANGLE, a component used for graphics rendering, could allow a remote attacker to execute malicious code. This vulnerability can be exploited by tricking a user into visiting a specially crafted web page. Successful exploitation could lead to arbitrary code execution, potentially allowing the attacker to take control of the affected system.

This vulnerability is rated as Critical severity for Red Hat Enterprise Linux because it allows an unauthenticated remote attacker to escape the application sandbox and execute arbitrary code with the privileges of the logged-in user. The issue primarily impacts desktop workstations and client applications that leverage WebKitGTK to process untrusted web content or render complex graphics. Red Hat Enterprise Linux servers operating without graphical desktop environments or browser engines are not exposed to this flaw under typical deployment configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.