EIP-2026-103710
PRE-CVEWebKit - User-agent Shadow root Leak in WebCore::ReplacementFragment::ReplacementFragment
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103710. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit leverages a type confusion vulnerability in WebKit's handling of shadow DOM elements, allowing an attacker to leak internal elements and manipulate them to achieve arbitrary code execution. The PoC demonstrates how an attacker can access and repurpose a SliderThumbElement from an input element's shadow DOM.
Description
WebKit - User-agent Shadow root Leak in WebCore::ReplacementFragment::ReplacementFragment
Exploits (1)
This exploit leverages a type confusion vulnerability in WebKit's handling of shadow DOM elements, allowing an attacker to leak internal elements and manipulate them to achieve arbitrary code execution. The PoC demonstrates how an attacker can access and repurpose a SliderThumbElement from an input element's shadow DOM.