CVE-2026-87500

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML page. This could lead to a complete compromise of the affected system.

This vulnerability is rated Critical because an unauthenticated remote attacker can escape client sandboxing boundaries to achieve arbitrary code execution on the host with user privileges. In Red Hat Enterprise Linux, this flaw primarily impacts desktop environments and applications that embed WebKitGTK for rendering web graphics. Headless server deployments without graphical interfaces or embedded browser components do not expose this attack surface under standard configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.