CVE-2026-79189

A flaw was found in ANGLE, a component used in chromium-browser. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, allowing the attacker to gain control over the affected system.

Critical severity is assigned to this vulnerability because an unauthenticated remote attacker can escape security sandboxes and achieve arbitrary code execution merely by convincing a victim to load untrusted web content. Red Hat Enterprise Linux systems running graphical applications or embedded browsers built against WebKitGTK are exposed when processing untrusted WebGL or HTML graphics. Although user interaction is required, the potential for complete compromise of the user session without needing elevated privileges justifies the rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.