CVE-2023-26081

🗓️ 20 Feb 2023 00:00:00Reported by MendType

mend🔗 www.mend.io👁 3 Views

Passwords can be exfiltrated from sandboxed contexts in Epiphany via untrusted web content.

Reporter	Title	Published	Views	Family All 36
BDU FSTEC	Epiphany Access Control Disclosure	30 Mar 202300:00	–	bdu_fstec
CNNVD	GNOME Web 安全漏洞	20 Feb 202300:00	–	cnnvd
CVE	CVE-2023-26081	20 Feb 202300:00	–	cve
Cvelist	CVE-2023-26081	20 Feb 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3423-1] epiphany-browser security update	15 May 202321:36	–	debian
Debian CVE	CVE-2023-26081	20 Feb 202300:00	–	debiancve
Tenable Nessus	Debian dla-3423 : epiphany-browser - security update	16 May 202300:00	–	nessus
Tenable Nessus	Fedora 36 : epiphany (2023-26b58f8098)	1 Mar 202300:00	–	nessus
Tenable Nessus	Fedora 37 : epiphany (2023-d8d2cd7c58)	26 Feb 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-26081	5 Mar 202500:00	–	nessus

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00015.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-26081
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IFWUNG6E4ZT43EYNHKYXS7QVSO2VW2H2/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SADQCSQKTJKTTIJMEPY7GII6IVQSKEKV/
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26081.json
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFWUNG6E4ZT43EYNHKYXS7QVSO2VW2H2/
gitlab	www.gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1275
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SADQCSQKTJKTTIJMEPY7GII6IVQSKEKV/
github	www.github.com/google/security-research/security/advisories/GHSA-mhhf-w9xw-pp9x
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-26081

06 Oct 2026 02:43Current

CVSS 3.17.5

CVSS 48.7

EPSS0.01238

SSVC

Epiphany GNOME Web password exfiltration autofill sandboxed context