CVE-2026-78376

Published: Aug 24, 2026Modified: Aug 28, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (3)

https://access.redhat.com/security/cve/CVE-2026-78376

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2521858

Source: secalert@redhat.com

https://github.com/WebKit/WebKit/pull/72142

Source: secalert@redhat.com

Timeline

No history available yet.