Summary
Thirteen-year WebKit flaw bypasses Content Security Policy. This high-severity finding affects WebKit.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
Thirteen-year WebKit flaw bypasses Content Security Policy
CVE-2026-43660
- Affected product
- WebKit
- Severity
- High · CVSS 7.5
- Weakness
- CWE-693
- Disclosed