CVE-2026-79285

A flaw was found in ANGLE, a component used by Google Chrome. A remote attacker could exploit an uninitialized resource vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to obtain sensitive cross-origin data, leading to information disclosure.

This vulnerability is rated as Important for Red Hat Enterprise Linux desktop installations because an unauthenticated remote attacker can bypass cross-domain security boundaries to expose sensitive data, leading to significant confidentiality loss upon visiting a malicious web page. Within Red Hat deployments, exposure is primarily limited to graphical systems running applications that embed the WebKitGTK rendering engine. Minimal server environments operating without desktop packages or embedded browser components do not process external web content and are therefore not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.