CVE-2026-79188

A flaw was found in the ANGLE component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox.

Critical severity is assigned to this vulnerability because an unauthenticated remote attacker can escape sandbox boundaries to execute arbitrary code, compromising the host system. In Red Hat Enterprise Linux, exposure is primarily confined to workstation and desktop environments where users interact with applications embedding WebKitGTK or Chromium to render web content. Headless servers and standard administrative tools that do not process untrusted web graphics are not impacted under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.