CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
GNOME Epiphany Browser WebExtension Installation Arbitrary File Overwrite Vulnerability (CVE-2026-118599)
[Affected Scope] GNOME Epiphany browser versions 47.0 and above
[Impact] Installing or opening a crafted WebExtension (.xpi) can cause user-writable files to be truncated and overwritten with attacker-controlled content and permissions without warning
[Mitigation] Immediately upgrade Epiphany to the patched version that restricts archive extraction to the ZIP format only