CVE-2026-84518

Medium webkit Logic Error

Overview

Medium

Severity

—

CVSS

Exploited ITW

Embargoed

Fix Status

ImpactA malicious website may be able to determine what apps a user has installed

DescriptionThis issue was addressed through improved state management.

ComponentWebKit

Bug ClassLogic Error

CISA KEVNot listed

Disclosed2026-09-14

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.

References

Vendor advisory NVD

On This Page