CVE-2026-87648

A flaw was found in ANGLE, a component of Google Chrome. A remote attacker who has compromised the renderer process could exploit a use-after-free vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to execute arbitrary code outside of the sandbox, leading to a compromise of the system.

Red Hat has evaluated this vulnerability as an Important severity flaw because escaping sandbox containment allows code execution on the underlying host, although it demands an initial compromise of the rendering process. In typical Red Hat Enterprise Linux installations, standard browser packages such as Firefox are unaffected as they do not incorporate the flawed graphics subsystem. Any residual risk in applications utilizing affected web rendering libraries is constrained by user privileges and requires convincing a local user to view hostile web content.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.