CVE-2026-28859
Overview
Advisory: Apple Security Advisory
Impact:
Description: A malicious website may be able to process restricted web content outside the sandbox
Researchers: greenbynox, Arni Hardarson, and an anonymous researcher
| Attribute | Value |
|---|---|
| CVE | CVE-2026-28859 |
| Bugzilla | 308248 |
| Component | WebKit |
| Bug Class | SandboxEscape |
| Severity | medium |
| Commit | 6aacf62000967a62… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/WebKit/GPUProcess/graphics/RemoteGraphicsContext.cpp