CVE-2026-20665 PUBLISHED CVSS 6.5 MEDIUM

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

EPSS 0.03% · 9.5th percentile

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
EPSS Score
0.03%
9.5th percentile

Affected Products

VendorProductVersions
AppleiOS and iPadOS0, 0
applemacos0
appleiphone_os26.0, 0
AppletvOS0
applevisionos0
appletvos0
ApplevisionOS0
ApplewatchOS0
appleipados0, 26.0
applewatchos0
ApplemacOS0
AppleSafari0
applesafari0

Timeline

References

Open in Interactive Console →