← WebKit Silent-Fix Report — 2026-W21
113cf2c7cf Check m_closed in NetworkStorageManager::donePrepareForEviction
severity low
class UAF
confidence 0.50
WebKit NetworkProcess storage
Primitive: use-after-close on eviction completion for a closed NetworkStorageManager
Triage note: Adds an m_closed guard on an async completion path, preventing use of state after the manager is closed.
Triage note: Adds an m_closed guard on an async completion path, preventing use of state after the manager is closed.
Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.
Before / after
Loading diff…