PatchGap
Firefox · Layout

CVE-2026-3846

Cross Origin in Layout
High firefox Cross Origin 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionSame-origin policy bypass in the CSS Parsing and Computation component
ComponentLayout
Bug ClassCross Origin
Tracker2018400
Fix commit8b5e58f9df78 (firefox) +1/-0
CISA KEVNot listed
CreditedJun Yang
Disclosed2026-03-10

Files Changed

  • layout/style/StyleSheet.cpp

Patch

view commit
diff --git a/layout/style/StyleSheet.cpp b/layout/style/StyleSheet.cpp
index 3df7c48b412..845c8a7b1d3 100644
--- a/layout/style/StyleSheet.cpp
+++ b/layout/style/StyleSheet.cpp
@@ -349,6 +349,7 @@ StyleSheetInfo::StyleSheetInfo(CORSMode aCORSMode,
 StyleSheetInfo::StyleSheetInfo(StyleSheetInfo& aCopy, StyleSheet* aPrimarySheet)
     : mCORSMode(aCopy.mCORSMode),
       mIntegrity(aCopy.mIntegrity),
+      mOriginClean(aCopy.mOriginClean),
       // We don't rebuild the child because we're making a copy without
       // children.
       mSourceMapURL(aCopy.mSourceMapURL),
Loading diff…
On This Page