Week 32: August 8–14, 2026
Overview
| Metric | Value |
|---|---|
| New CVEs | 3 |
| Critical | 0 |
| High | 2 |
| Medium | 1 |
CVE-2026-64728
Bugzilla: 317480
Component: WebKit
Class: Sandbox Escape
Severity: High
Commit: c3d4e5f6...
Sandbox attribute bypass via navigation of sandboxed iframe to javascript: URI. The navigation policy check did not re-evaluate sandbox flags after a redirect chain.
CVE-2026-64720
Bugzilla: 317300
Component: WebCore
Class: Race Condition
Severity: High
Commit: d4e5f6a7...
Race condition between document loader cancellation and resource callback dispatch. Raw DocumentLoader* pointer held by callback becomes dangling after loader destruction.