CRITICAL
chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page
Published Aug 25, 2026
9.6
CRITICALCVSS 3.1
EPSS 0.48%
Description
Out of bounds write in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected products
-
- Version 152.0.7977.65StatusaffectedConstraints<152.0.7977.65
- Version
No data.
Red Hat Enterprise Linux 6
webkitgtk
Out of support scope
Red Hat Enterprise Linux 7
webkitgtk3
Affected
Red Hat Enterprise Linux 7
webkitgtk4
Affected
Red Hat Enterprise Linux 8
webkit2gtk3
Affected
Red Hat Enterprise Linux 9
webkit2gtk3
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | webkitgtk | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | webkitgtk3 | Affected | n/a |
| Red Hat Enterprise Linux 7 | webkitgtk4 | Affected | n/a |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | Affected | n/a |
| Red Hat Enterprise Linux 9 | webkit2gtk3 | Affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://access.redhat.com/security/cve/CVE-2026-79019 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523917 Issue Tracking
- https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html Release NotesVendor Advisory
- https://issues.chromium.org/issues/523266585 Permissions Required
- https://nvd.nist.gov/vuln/detail/CVE-2026-79019
- https://www.cve.org/CVERecord?id=CVE-2026-79019
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-79019 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2523917 | Issue Tracking | |
| https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html | Release NotesVendor Advisory | |
| https://issues.chromium.org/issues/523266585 | Permissions Required | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-79019 | ||
| https://www.cve.org/CVERecord?id=CVE-2026-79019 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Chrome
Published Aug 25, 2026
Updated Aug 27, 2026
Reserved Aug 25, 2026
Link CVE-2026-79019
CISA Vulnrichment
Updated Aug 26, 2026