CVE-2026-79140
Description
A flaw was found in Views in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the affected system.
Statement
This vulnerability is evaluated as having a Critical impact because successful exploitation allows an unauthenticated remote attacker to escape the browser sandbox and execute arbitrary commands in the user's host context. Red Hat Enterprise Linux does not include Chromium in default or supported enterprise repositories, limiting direct exposure primarily to systems utilizing community packages such as Fedora or EPEL. Exploitation requires user interaction, specifically persuading a victim to open malicious web content within an affected browser instance.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
