CVE Database›Document archive›CVE-2026-79240

CVE-2026-79240

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write

Loading…

Severity

Important

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · August 26, 2026

Updated · November 2, 2026

Description

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the sandbox environment.

Statement

This vulnerability is rated as an Important impact for Red Hat Enterprise Linux because successful exploitation requires user interaction to navigate to a malicious web page, yet allows code execution within the rendering sandbox. The flaw stems from memory corruption in the ANGLE graphics translation library, primarily affecting graphical desktop systems where users actively process untrusted web pages. Typical enterprise server deployments lacking graphical user interfaces or web browsing applications are not exposed to this vulnerability under standard configurations.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 · Out-of-bounds Write