CVE-2026-79240
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via out-of-bounds write
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 26, 2026
Updated · November 2, 2026
Description
A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially lead to arbitrary code execution within the sandbox environment.
Statement
This vulnerability is rated as an Important impact for Red Hat Enterprise Linux because successful exploitation requires user interaction to navigate to a malicious web page, yet allows code execution within the rendering sandbox. The flaw stems from memory corruption in the ANGLE graphics translation library, primarily affecting graphical desktop systems where users actively process untrusted web pages. Typical enterprise server deployments lacking graphical user interfaces or web browsing applications are not exposed to this vulnerability under standard configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write