4.3
Moyenne
CVE-2026-28861 A logic issue was addressed with improved state management
Description
A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Safari 26.4 | premières → < 26.4 | 26.4 |
| iOS and iPadOS 26.4 | premières → < 26.4 | 26.4 |
| iOS and iPadOS 18.7 | premières → < 18.7.7 | 18.7.7 |
| macOS 26.4 | premières → < 26.4 | 26.4 |
| visionOS 26.4 | premières → < 26.4 | 26.4 |
| Red Hat Enterprise Linux 6 | Versions non publiées | |
| Red Hat Enterprise Linux 7 | Versions non publiées | |
| Red Hat Enterprise Linux 8 | Versions non publiées | |
| Red Hat Enterprise Linux 9 | Versions non publiées |
Références
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Safari
Les 520 CVE de Safari →
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Moyenne
CVE-2026-113949
A type confusion issue was addressed with improved state management
8.8
Élevée
CVE-2026-112621
An out-of-bounds write issue was addressed with improved bounds checking
7.5
Élevée
CVE-2026-112699
An out-of-bounds read was addressed with improved bounds checking
6.5
Moyenne