CVE-2026-87512

A flaw was found in chromium-browser. A use-after-free vulnerability in ANGLE allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to a complete compromise of the affected system.

This flaw is rated as Critical because successful exploitation could permit arbitrary command execution that bypasses application sandbox boundaries, potentially compromising the host environment completely. Although upstream advisories indicate this issue specifically targets Windows builds, Red Hat maintains a high severity assessment due to the severe consequences if embedded graphics translation libraries are reached. Exploitation necessitates user interaction, requiring a client to navigate to untrusted, malicious web content.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.