CVE-2026-79269

A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to bypass the web origin policy, leading to unauthorized access to sensitive information or actions.

This vulnerability is rated as having a Critical impact because successful exploitation bypasses the same-origin policy, breaking the core isolation model of web platforms and potentially exposing cross-domain sensitive data. In Red Hat Enterprise Linux environments, exposure is restricted to graphical workstations or applications utilizing embedded WebKitGTK rendering libraries when processing untrusted web content. Headless server installations do not run graphical web rendering engines by default, substantially limiting exposure across enterprise deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.