CVE-2026-87596

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, leading to information disclosure.

This vulnerability is rated as Important for Red Hat Enterprise Linux because it permits an unauthenticated remote adversary to bypass process sandbox boundaries and read sensitive host memory, posing a high confidentiality risk without requiring local user privileges. Successful exploitation relies on user interaction, specifically convincing an end user to render malicious graphics or web content within a client application that incorporates the ANGLE translation layer, such as Chromium or WebKitGTK. Server installations operating in headless environments or lacking graphical desktop packages are not exposed to this issue in standard deployment configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.