CVE-2026-79149

A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system.

This vulnerability is rated Critical because an unauthenticated remote attacker could achieve arbitrary code execution outside the renderer sandbox with the permissions of the local user. In Red Hat Enterprise Linux, the issue affects the ANGLE graphics translation engine embedded in WebKitGTK packages, requiring an unsuspecting user to process malicious web content within an affected application. Standard server installations lacking desktop environments or WebKit-based applications are not exposed to this attack vector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.