CVE-2026-87604

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability could allow a remote attacker, who has already compromised the browser's renderer process, to potentially execute arbitrary code outside of the browser's security sandbox. This exploitation occurs when a user visits a specially crafted HTML page.

This vulnerability is rated as Important because, although exploiting it requires a pre-existing renderer compromise and victim interaction, an adversary can break out of application sandboxing to achieve arbitrary code execution on the host. In Red Hat Enterprise Linux, affected WebKit rendering components are primarily utilized by graphical desktop applications rather than default headless server workloads. Consequently, exposure is limited to installations where desktop environments are deployed and users process untrusted external web content.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.