A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is permitted to read via abusing the file drag-and-drop mechanism where WebKitGTK does not verify that drag operations originate from outside the browser.
References
Configurations
No configuration.
History
07 Jan 2026, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-346 |
22 Dec 2025, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Dec 2025, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Dec 2025, 10:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Dec 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Dec 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
17 Dec 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
11 Dec 2025, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Dec 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Dec 2025, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Dec 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-03 10:15
Updated : 2026-01-07 16:15
NVD link : CVE-2025-13947
Mitre link : CVE-2025-13947
CVE.ORG link : CVE-2025-13947
JSON object : View
Products Affected
No product.
CWE
CWE-346
Origin Validation Error