CVE-2026-79275

A flaw was found in ANGLE, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. The attacker could exploit this by enticing a user to visit a specially crafted HTML page.

This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can escape the application sandbox to execute arbitrary code on the underlying host. On standard Red Hat Enterprise Linux server installations, graphical rendering libraries such as WebKitGTK and Chromium are not installed or invoked by default unless workstation packages or desktop environments are explicitly selected. Triggering the flaw requires a local user to process a malicious, attacker-controlled web page in a vulnerable web rendering application. However, the ability to break isolation boundaries and achieve full host code execution justifies the Critical rating for environments where these desktop components are active.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.