CVE-2026-87621

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds write vulnerability allows a remote attacker to potentially execute arbitrary code. By tricking a user into visiting a specially crafted HTML page, an attacker could bypass the browser's security sandbox and execute malicious code on the system.

Red Hat Product Security rates the severity of this vulnerability as Critical because successful exploitation enables a remote, unauthenticated adversary to escape browser sandboxing and achieve arbitrary code execution on the host system. In Red Hat Enterprise Linux, the impacted WebKit rendering libraries are primarily utilized by graphical desktop applications and embedded web viewers rather than headless server services. Consequently, exposure is confined to systems where users actively process untrusted web content or render untrusted HTML within desktop environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.