This Week in WebKit — March 14 - March 20, 2026
Free
2026-03-24
UAF in WebGL timer query extension via async lambda capturing by reference instead of smart pointer; Wasm IPInt interpreter PC desynchronization from variable-length LEB128 sub-opcodes — bypasses validation; Sec-Fetch-Site header reset on form resubmission enables CSRF bypass against fetch-metadata defenses