Description
The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apple Safari
0 to < 26.1affected
Apple iOS and iPadOS
0 to < 26.1affected
Apple macOS
0 to < 26.1affected
Apple tvOS
0 to < 26.1affected
Apple visionOS
0 to < 26.1affected
Apple watchOS
0 to < 26.1affected