VDB
TNCVE-2026-28871
TNCVE-2026-28871
PUBLISHED
A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4. Visiting a maliciously crafted website may lead to a cross-site scripting attack.
Timeline
- Mar 25, 2026 CVE Published
References
- Tenable: CVE-2026-28871 advisory