CVE record · 1 source
CVE-2026-118599
CVSS 5.5A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files.
- Vendor
- GNOME
- Product
- Epiphany
- CVSS v3.1
- 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weakness
- CWE-59
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files.
A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webextension/ephy-web-extension-manager.c, decompress_xpi_thread() used libarchive with…