GNOME Epiphany

• CVE-2026-118599 Medium 5.5 epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install 0.2%
• CVE-2026-118598 Medium 6.5 epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access 0.5%
• CVE-2026-115683 Medium 6.8 epiphany: TLS certificate warning bypass via race in tlsErrorPage message handler 0.2%
• CVE-2026-18487 Medium 5.4 Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host() 0.3%