Not scored
CVE-2026-20643
No description published yet
Vendor not yet named
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 8 Oct
0.3%probability of exploitation in the next 30 days
Higher than 27% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may bypass Same Origin Policy.
Coverage 3 articles · 3 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 18 Mar · 07:30 UTC | The Hacker News | Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS |
| Wed 18 Mar · 12:06 UTC | Malwarebytes | Apple patches WebKit bug that could let sites access your data |
| Wed 18 Mar · 13:08 UTC | SecurityWeek | Apple Debuts Background Security Improvements With Fresh WebKit Patches |
- Apple Debuts Background Security Improvements With Fresh WebKit PatchesSecurityWeek
- Apple patches WebKit bug that could let sites access your dataMalwarebytes
- Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOSThe Hacker News · first in our coverage