Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-103709. PoCs published by Google Security Research.
AI-analyzed exploit summary The writeup describes a WebKit vulnerability (EIP-2026-103707) where a race condition during page navigation allows JavaScript execution in the context of another document. The attack requires a victim page to load an attacker-controlled iframe and exploits the `detachChildren` function to bypass `SubframeLoadingDisabler`.
Description
WebKit - Universal XSS Using Cached Pages
Exploits (1)
The writeup describes a WebKit vulnerability (EIP-2026-103707) where a race condition during page navigation allows JavaScript execution in the context of another document. The attack requires a victim page to load an attacker-controlled iframe and exploits the `detachChildren` function to bypass `SubframeLoadingDisabler`.