CVE-2026-20656

A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history.

Score

CVSS 3.1 3.3 Low

Status

Modified - product-security@apple.com

Published

2026-02-11

Last modified

2026-04-02

Weaknesses

CWE-285

Affected products

• Ios And Ipados (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Macos (Apple)
• Safari (Apple)

References

• https://support.apple.com/en-us/126347
• https://support.apple.com/en-us/126348
• https://support.apple.com/en-us/126354