CVE-2026-87654

A flaw was found in Chromium's ANGLE component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to the execution of arbitrary code outside the browser's security sandbox, potentially compromising the affected system.

This vulnerability is rated as Critical for Red Hat because successful remote exploitation can escape process sandboxing to execute arbitrary code with the privileges of the running user. In Red Hat Enterprise Linux, the impacted rendering components are primarily utilized by graphical desktop applications and embedded WebKitGTK consumers, rather than default server deployments. Exploitation relies on convincing a user to open an untrusted webpage or document. Standard headless server installations that do not run graphical or web-rendering workloads face minimal exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.