685 matches found
domato
Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...
[SECURITY] Fedora 45 Update: epiphany-51.2-1.fc45
Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the web content, instead of the browser application...
CVE-2026-121003
A flaw was found in Epiphany. An information disclosure vulnerability allows local users to discover websites visited during private browsing sessions. When a user selects the "Always Allow" option for external URL schemes while in incognito mode, Epiphany stores the visited domain into the user'...
openSUSE 16: epiphany / epiphany-branding-upstream / epiphany-lang / etc (openSUSE-SU-2026:22199-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22199-1 advisory. Changes in epiphany: - CVE-2026-77679: path traversal in WebExtension XPI extraction ZIP slip bsc1276758 - CVE-2026-77682: JavaScript code...
OPENSUSE-SU-2026:12379-1 epiphany-51.2-1.1 on GA media
These are all security issues fixed in the epiphany-51.2-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...
SUSE CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
DEBIAN-CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
DEBIAN-CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...
CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...
CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...
UBUNTU-CVE-2026-118598
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...
UBUNTU-CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
CVE-2026-118599 epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
EUVD-2026-114699
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
CVE-2026-118599
A file overwrite vulnerability exists in Epiphany (version >= 47.0 ) when installing WebExtension packages from .xpi files. The root cause is that the decompress_xpi_thread() function in src/webextension/ephy-web-extension-manager.c uses libarchive with archive_read_support_format_all(), allow...
CVE-2026-118599
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompressxpithread used libarchive with archivereadsupportformatall and filters, so the installer did not require a real ZIP. A TAR file name...
CVE-2026-118598 epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...