LadybirdBrowser vulnerabilities
We track 3 vulnerabilities in LadybirdBrowser products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest LadybirdBrowser vulnerabilities
- 8.8 High severity
ladybird: Use After Free
Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from m_records, retained an iterator to the next Finalizat
- 7.1 High severity
ladybird: Exposure of Sensitive Information to an Unauthorized Actor
Ladybird is a truly independent web browser. Prior to the c0d68bddf3e3616e5173835f0f4c155ee9700d91 commit, CSSStyleSheet.cssRules, insertRule(), and deleteRule() in Libraries/LibWeb/CSS/CSSStyleSheet.cpp did not enforce the stylesheet origin-clean flag with th
- 8.3 High severity
Ladybird: Out-of-bounds Write
Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader. When a JavaScript function is imported into a WebAssembly module via the ESM path, WebAssemblyModule.cpp passes a stack-local Wasm