CVE-2026-79270

A flaw was found in chromium-browser. A remote attacker could exploit an uninitialized resource vulnerability in ANGLE by crafting a malicious HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox.

This vulnerability is rated as having Important impact for Red Hat Enterprise Linux because successful exploitation allows an attacker to bypass browser process isolation and leak sensitive memory across security boundaries, despite requiring user interaction. While Google Chrome is not distributed by Red Hat, the underlying ANGLE graphics translation layer is integrated into embedded web engines such as WebKitGTK used by desktop applications. Standard enterprise server deployments without graphical environments do not expose this surface, and standalone web browsers like Mozilla Firefox do not incorporate the affected subsystem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.