Description (CNA)
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / Safari | affected 0 before 27 |
| Apple / iOS and iPadOS | affected 0 before 27 |
| Apple / macOS | affected 0 before 27 |
| Apple / visionOS | affected 0 before 27 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/149034
- https://support.apple.com/en-us/149035
- https://support.apple.com/en-us/149038
- https://support.apple.com/en-us/149039
ADP enrichment
No English description supplied.
No references supplied.