Security Research

WebGPU importExternalTexture bypasses cross-origin video pixel protection. CVE-2026-43735

Tracing a missing origin-clean validation in WebKit from the existing Canvas2D guard to an addressed WebGPU security issue.