Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-118598— epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access

Quick assessment

Affected
GNOME Epiphany
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Epiphany 浏览器在站点权限处理中存在逻辑错误，导致即使用户仅批准了其他类型的权限（如剪贴板或网站数据访问），摄像头和麦克风的访问权限仍可能被授予。 在 文件中， 函数负责在 WebKit 权限对话框弹出后，存储用户对“允许”或“拒绝”的选择。然而， （剪贴板）和 （网站数据访问）这两种权限类型并未被 函数所记录。因此，程序执行流进入了一个本应处理其他情况的 分支，该分支的代码如下： 由于该表达式是一个非零的枚举常量，上述分支对于剪贴板或网站数据访问请求始终会被执行。结果导致系统为当前站点来源同时写入 （允许

CVSS 6.5 · Medium EPSS 0.47% · P41

Affected Version Matrix 1

VendorProduct Version RangeStatus
GNOME Epiphany 45.0< * affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-118598

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access
Source: CVE Program / CVE List V5
Vulnerability Description
A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, set_permission() stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and WEBSITE_DATA_ACCESS are not stored by ephy_permission_is_stored_by_permissions_manager(), so control fell into an else-if that was written as: } else if (EPHY_PERMISSION_TYPE_ACCESS_WEBCAM_AND_MICROPHONE) { Because that expression is a non-zero enum constant, the branch always ran for those types and wrote EPHY_PERMISSION_PERMIT for both ACCESS_WEBCAM and ACCESS_MICROPHONE for the site origin. The user only saw a Clipboard or Website Data Access dialog. A malicious site that obtains approval for clipboard or third-party storage access can afterwards use getUserMedia without a further camera/microphone prompt, exposing audiovisual confidentiality. Requirements: the victim must visit a malicious page and click Allow on a clipboard or website-data-access prompt. Affected: Epiphany >= 45.0 (bug present at least through 51.x). Fixed: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/2249 (commit 480c3648). Upstream: https://gitlab.gnome.org/GNOME/epiphany/-/work_items/2976 Reporter acknowledgment: Fernando Munoz
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
GNOME Epiphany 45.0 ~ * -

II. Public POCs for CVE-2026-118598

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-118598

请登录查看更多情报信息。

Other References for CVE-2026-118598 (4)

IV. Related Vulnerabilities

Same product: Epiphany
Same vendor: GNOME
Same weakness: CWE-863