← CVE Intelligence

CVE-2026-20608

Apple / Safari PUBLISHED

Description (CNA)

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected (CNA)

Vendor / productVersions
Apple / Safariaffected 0 before 26.3
Apple / iOS and iPadOSaffected 0 before 18.7.5; affected 0 before 26.3
Apple / macOSaffected 0 before 26.3
Apple / visionOSaffected 0 before 26.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management.