Skip to content
OpenAdvisories

Vendor

LadybirdBrowser

3 known vulnerabilities.

Products

Ladybird 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-119332

    Ladybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()

    Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from m_records, retained an iterator to the next Finaliza…

    LadybirdBrowser Ladybird
  • High 7.1
    CVE-2026-119331

    Ladybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation

    Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet.cssRules, insertRule(), and deleteRule() in Libraries/LibWeb/CSS/CSSStyleSheet.cpp did not enforce the stylesheet origin-clean flag with t…

    LadybirdBrowser Ladybird
  • High 8.3
    CVE-2026-58592

    Ladybird - Web-Reachable Code Execution via Dangling FunctionType Reference in WebAssembly ESM Integration

    Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaScript function is imported into a WebAssembly module via the ESM path, WebAssemblyModule.cpp passes a stack-local Was…

    LadybirdBrowser Ladybird