CVE record · 1 source
CVE-2026-115683
CVSS 6.8A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.
- Vendor
- GNOME
- Product
- Epiphany
- CVSS v3.1
- 6.8 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- Weakness
- CWE-367
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.
A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page. Epiphany registers the main-world script message handler "tlsErrorPage" so its internal TLS error page can implement "Accept…