Reports
Weekly WebKit security reports. Filtered by InfoDisclosure.
All 16UAF 14TypeConfusion 12CrossOrigin 11Race 10OOB 10AuthBypass 9LogicError 8Other 7MemoryCorruption 7IntegerOverflow 6UninitializedMemory 4SandboxEscape 3InfoDisclosure 2
-
W23
8 picks from 484 commits 2026-06-06 – 12 6 security 2 dev v1.3.3
Closing a page freed the <html> element out from under its own shadow trees.; A scope guard that pinned the string cell but not the bytes you were reading; Streams' pipeTo checked for a fake promise with a cast that never fails
UAF9OOB5Race5CrossOrigin4+13 -
W21
6 picks from 423 commits 2026-05-23 – 29 6 security v1.3.3
B3 was right that the value was dead — the collector agreed, and freed it.; The DFG certified a property absent from an object that owned it outright.; An IC exit undid a stack adjustment that had never happened.
UAF10OOB5AuthBypass5LogicError5+17