CVE-2026-78376CWE-416

CVE-2026-78376

High · published August 24, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00285 · 20.0th percentile
Weakness
CWE-416 · Use After Free
Published
2026-08-24T18:17Z
References (5)
https://access.redhat.com/errata/RHSA-2026:69098 · [email protected]https://access.redhat.com/errata/RHSA-2026:74084 · [email protected]https://access.redhat.com/security/cve/CVE-2026-78376 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2521858 · [email protected]https://github.com/WebKit/WebKit/pull/72142 · [email protected]
EPSS history
Timeline
  • 26 AUG 08:27Z
    EPSS moved — → 0%
    epss
  • 24 AUG 13:29Z
    Webkitgtk: use-after-free of jscvalue function parameters
    cvelistv5