CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
GNOME Epiphany Browser WebExtension Installation Arbitrary File Overwrite Vulnerability (CVE-2026-118599)
[Affected Scope] GNOME Epiphany browser versions 47.0 and above
[Impact] Installing or opening a crafted WebExtension (.xpi) can cause user-writable files to be truncated and overwritten with attacker-controlled content and permissions without warning
[Mitigation] Immediately upgrade Epiphany to the patched version that restricts archive extraction to the ZIP format only
GNOME Epiphany Browser Permission Bypass and Unauthorized Camera/Microphone Access Vulnerability (CVE-2026-118598)
[Affected Scope] GNOME Epiphany browser versions 45.0 through at least 51.x
[Impact] Attackers can bypass permission prompts and access the camera and microphone without user consent, leading to audiovisual confidentiality exposure, if the user approves clipboard or website data access
[Mitigation] Immediately update Epiphany to the patched version containing upstream commit 480c3648