Process Crash Vulnerability in Apple Products
CVE-2026-20608

5.5MEDIUM

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 11 February 2026

What is CVE-2026-20608?

An issue in various Apple operating systems can lead to an unexpected process crash when handling specially crafted web content. This vulnerability has been mitigated through enhanced state management in the affected products, which include macOS, iOS, iPadOS, and Safari. Users are advised to update to the latest software versions to enhance security and avoid potential disruptions.

Affected Version(s)

iOS and iPadOS 0 < 18.7.5

iOS and iPadOS 0 < 26.3

macOS 0 < 26.3

References

https://support.apple.com/en-us/126346

https://support.apple.com/en-us/126347

https://support.apple.com/en-us/126348

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 11, 2026
Vulnerability Reserved
Nov 11, 2025

CVE-2026-20608 Data

JSON