5.4
Moyenne
CVE-2026-86898 A logic issue was addressed with improved state management
Description
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Safari 27 | premières → < 27 | 27 |
| iOS and iPadOS 27 | premières → < 27 | 27 |
| macOS 27 | premières → < 27 | 27 |
| visionOS 27 | premières → < 27 | 27 |
Références
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Safari
Les 520 CVE de Safari →
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Moyenne
CVE-2026-113949
A type confusion issue was addressed with improved state management
8.8
Élevée
CVE-2026-112621
An out-of-bounds write issue was addressed with improved bounds checking
7.5
Élevée
CVE-2026-112699
An out-of-bounds read was addressed with improved bounds checking
6.5
Moyenne