4.3
Moyenne
CVE-2026-28871 A logic issue was addressed with improved checks
Description
A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a maliciously crafted website may lead to a cross-site scripting attack.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Safari 26.4 | premières → < 26.4 | 26.4 |
| iOS and iPadOS 26.4 | premières → < 26.4 | 26.4 |
| iOS and iPadOS 18.7 | premières → < 18.7.7 | 18.7.7 |
| macOS 26.4 | premières → < 26.4 | 26.4 |
Références
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Safari
Les 520 CVE de Safari →
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Moyenne
CVE-2026-113949
A type confusion issue was addressed with improved state management
8.8
Élevée
CVE-2026-112621
An out-of-bounds write issue was addressed with improved bounds checking
7.5
Élevée
CVE-2026-112699
An out-of-bounds read was addressed with improved bounds checking
6.5
Moyenne