CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture cross-origin information leak. Safari Red/Green/Blue/White Fixed version = 26.5.2: PATCHED importExternalTexture blocked: SecurityError Principle GPUDevice.importExternalTexturesource: HTMLVideoElement imports a video into a GPU-samplable . Befor...

The vulnerability of the importExternalTexture method in the Web page rendering module of the Safari browser for iOS operating systems, iPadOS, and macOS allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the importExternalTexture method in the WebPageRendering module of the WebKit browser engine for Safari operating systems, iPadOS, and macOS is related to deficiencies in the mechanism for verifying data sources when processing web content. Exploiting this vulnerability can...