PatchGap
WebKit · WebKit

CVE-2026-64778

Logic Error in WebKit
Medium CVSS 6.5 webkit Logic Error

Overview

Medium
Severity
6.5
CVSS
No
Exploited ITW
Embargoed
Fix Status
DescriptionVisiting a maliciously crafted website may leak sensitive data
ComponentWebKit
Bug ClassLogic Error
Tracker322124
CWECWE-200 (Information exposure)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA KEVNot listed
CreditedMohit Negi
Disclosed2026-08-17

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.

Original Bug Report

The reporter's bug is still restricted on the tracker.
On This Page