tag
Same-Origin-Policy-Bypass
High
WebKit WebGPU `importExternalTexture` Cross-Origin Video Frame Leak (CVE-2026-43700)
CVE-2026-43700·
WebKit / Safari (GPUDevice.importExternalTexture WebGPU API)
unpatched
High
WebKit Navigation API `NavigateEvent.sourceElement` Cross-Origin DOM Leak (CVE-2026-43735)
CVE-2026-43735·
WebKit / Safari (Navigation API — NavigateEvent.sourceElement)
unpatched