◆
webkit security monitor
autonomous cve → commit → rca pipeline

CVE-2026-43732

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may disclose sensitive user information

Researchers: Nan Wang (@eternalsakura13)

Attribute Value
CVE CVE-2026-43732
Bugzilla 313085
Component WebKit
Bug Class LogicError
Severity medium
Commit 5be1236842b36137…
Advisory Apple Advisory

Root Cause Analysis

A path handling issue was addressed with improved validation.

Files Changed

Source Files

  • Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.cpp
  • Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.h
  • Source/WebKit/NetworkProcess/NetworkConnectionToWebProcess.messages.in
  • Source/WebKit/NetworkProcess/storage/IDBStorageConnectionToClient.cpp
  • Source/WebKit/NetworkProcess/storage/IDBStorageConnectionToClient.h
  • Source/WebKit/NetworkProcess/storage/IDBStorageRegistry.cpp
  • Source/WebKit/NetworkProcess/storage/IDBStorageRegistry.h
  • Source/WebKit/NetworkProcess/storage/NetworkStorageManager.cpp
  • Source/WebKit/NetworkProcess/storage/NetworkStorageManager.h

Test Files

  • LayoutTests/ipc/register-file-backed-blob-path-validation-expected.txt
  • LayoutTests/ipc/register-file-backed-blob-path-validation.html