CVE-2026-79200
Description
A flaw was found in Aura in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, leading to critical system compromise.
Statement
This vulnerability is rated as Critical severity because successful exploitation allows remote code execution that breaks out of the browser sandbox with the privileges of the active desktop user. Although Chromium is not shipped in Red Hat Enterprise Linux (RHEL) core repositories, it is packaged in Extra Packages for Enterprise Linux (EPEL) and Fedora. While triggering the issue requires user interaction to navigate to a malicious web page, the resulting scope breach poses a severe threat to host system integrity and confidentiality.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
