Web Content Vulnerability in Safari and Apple Products
CVE-2026-20665

6.5MEDIUM

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
TV OS
Vendor
CVE Published:
25 March 2026

What is CVE-2026-20665?

This vulnerability affects Apple Safari and various Apple operating systems by allowing processing of maliciously crafted web content, which may hinder the enforcement of the Content Security Policy. The issue was mitigated through enhancements in state management, ensuring that appropriate measures are taken to safeguard web applications against exploit attempts. Users are encouraged to update their devices to the latest software versions to eliminate this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 18.7.7

iOS and iPadOS 0 < 26.4

macOS 0 < 26.4

References

https://support.apple.com/en-us/126792
https://support.apple.com/en-us/126793
https://support.apple.com/en-us/126794

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.