216.73.216.214

CVE-2026-20665

· Published 25/03/2026 01:17 · Modified 25/03/2026 21:54

Labels: CVE-2026-20665 2026-03-25CVE-2026-20665CWE-693[email protected]

Essential information

Published
25/03/2026 01:17
Modified
25/03/2026 21:54
Author
—
Creator
—
CVSS
6.5 MEDIUM (v3.1)
CISA KEV
No
CWE
—
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CVSS metrics

Description

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

NVD status

Status
Analyzed — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
apple / safari cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
apple / ipados cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple / ipados cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple / iphone os cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple / iphone os cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple / macos cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / tvos cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
apple / visionos cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
apple / watchos cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

References