wid-sec-w-2026-0848 · Published 2026-03-24 · View on BSI CERT-Bund ↗

Apple Safari: Multiple Vulnerabilities

CVSS 6.5 MEDIUM

Risk Summary

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

CVEs (8)

CVE-2026-20643 CVE-2026-20664 CVE-2026-20665 CVE-2026-20691 CVE-2026-28857 CVE-2026-28859 CVE-2026-28861 CVE-2026-28871

Affected Vendors

Apple

Affected Products (2)

Apple · Safari <26.4

Apple · Safari 26.4

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more