Week 12, 2026

1 WebKit CVEs disclosed in the week of March 16, 2026 (ISO week 12). 1 have a public fix commit; 0 embargoed.

Severity Count
High 1

By component: WebCore (1)

By bug class: CrossOrigin (1)

CVE Bugzilla Component Class Severity Fix
CVE-2026-20643 306050 WebCore CrossOrigin high commit