CVE-2026-79142

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe compromise of the affected system.

This vulnerability is rated as Critical for Red Hat because successful exploitation allows an unauthenticated remote attacker to escape the sandbox and execute arbitrary commands directly on the host system. The affected ANGLE graphics translation component is bundled within WebKitGTK packages in Red Hat Enterprise Linux, whereas standalone Mozilla products such as Firefox and Thunderbird are unaffected. In typical Red Hat deployments, WebKitGTK is primarily utilized by optional graphical desktop applications, leaving headless enterprise server installations unexposed unless client rendering software processes untrusted web pages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.