← WebKit Silent-Fix Report — 2026-W22

083c7393fe  Sandbox rule related to VMs has incorrect ordering

severity low class SandboxEscape confidence 0.50 WebKit GPUProcess sandbox (macOS)
Per Arne Vollan Tue May 26 16:37:59 2026 -0700 full: 083c7393feb257e91d2d53f97e90af985372c4ba bug report ↗ view on GitHub ↗
Primitive: sandbox message-filter rule ordering
Triage note: Reorders sandbox iokit method-filter rules for a paravirtualization user client, a sandbox-hardening correctness fix.

Security-relevant, below the exploitable-grade bar for a full root-cause writeup. The triage verdict is above; the side-by-side patch is below.

Before / after

Loading diff…