CVE-2026-94291

A flaw was found in Epiphany GNOME Web. The ephy-reader and view-source URI schemes are not registered as display-isolated, allowing a remote attacker to frame them from web content via iframes. This can be exploited to exfiltrate local files when a user visits a malicious website...