Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-28871

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a malicious

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a maliciously crafted website may lead to a cross-site scripting attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple Safari

  • 0 to < 26.4affected

Apple iOS and iPadOS

  • 0 to < 18.7.7affected
  • 0 to < 26.4affected

Apple macOS

  • 0 to < 26.4affected

References