Skip to main content

🪐 Backed by $16.5M to build the security workforce for the security workforce. Meet the new Cantina.

Vulnerability disclosure

WebKit data-protection flaw exposes sensitive user data

CVE-2026-28958

Affected product
WebKit
Severity
Medium
CVSS
5.5
Weakness
CWE-200
Published

Disclosure summary

Cantina identified and human-verified this vulnerability in WebKit. The finding was coordinated with the affected maintainer through responsible disclosure before publication.

WebKit data-protection flaw exposes sensitive user data.

Verification standard

Cantina publishes a disclosure only after reproducing the behavior, validating its security impact, and coordinating remediation with the affected project.