CVE-2026-79282

A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitation could lead to a complete compromise of the affected device.

This vulnerability is rated as Critical severity for Red Hat products because an attacker can achieve remote code execution and escape sandbox containment without requiring system privileges. While initially reported in Chromium, the defective ANGLE graphics translation layer is integrated into WebKitGTK packages shipped in Red Hat Enterprise Linux. In typical enterprise environments, WebKitGTK is invoked by graphical applications rendering external web content, exposing users who interact with malicious web resources to complete application or system compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.