CVE-2026-78376
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.
Risk Assessment
An attacker could exploit this vulnerability to execute code or cause a browser crash, potentially exposing users to drive-by attacks.
Recommendation
Update WebKitGTK to the latest patched version.
Other vulnerabilities in WebKitGTK
See all- CVE-2015-2330High
Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies.
- CVE-2025-66287High
A flaw was found in WebKitGTK due to improper memory handling. Processing malicious web content can cause an unexpected process crash.
- CVE-2025-13947High
A vulnerability was found in WebKitGTK that allows remote, user-assisted information disclosure. The flaw is due to missing verification of the source of file drag-and-drop operations, enabling an attacker to read any file the user is permitted to access.
- CVE-2025-13502High
A flaw in WebKitGTK and WPE WebKit allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server.
Original NVD description (English source)
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.