CVE-2026-79230

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected system.

This vulnerability is rated as having Critical impact for Red Hat products because a remote, unauthenticated attacker could escape the client sandbox and execute arbitrary instructions on the host environment. In Red Hat Enterprise Linux, the affected ANGLE graphics translation layer is integrated into the WebKitGTK (webkit2gtk3) library, which powers local desktop and rendering utilities. Successful exploitation depends on an interactive user loading malicious web content, meaning server installations operating without graphical components are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.