CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

Meldingen over deze CVE

4 meldingen uit 1 bronnen, oudste eerst

iOS 27 and iPadOS 27
Apple Security ReleasesKwetsbaarheid14 sep
CVSS 9,8EPSS 1%CVE-2026-65414 CVE-2026-84561 CVE-2026-84609+120 CVE'sApple
15laag
macOS Golden Gate 27
Apple Security ReleasesKwetsbaarheid14 sep
Actief misbruiktCVSS 10,0EPSS 4%CVE-2022-3437 CVE-2026-65400 CVE-2026-65414+204 CVE'sApple
55hoog
visionOS 27
Apple Security ReleasesKwetsbaarheid14 sep
CVSS 9,8EPSS 1%CVE-2026-65414 CVE-2026-65343 CVE-2026-84561+118 CVE'sApple
15laag
Safari 27
Apple Security ReleasesKwetsbaarheid14 sep
CVSS 6,5CVE-2026-84635 CVE-2026-84518 CVE-2026-64753 Apple
0laag