← Database

CVE-2026-20691

MEDIUM CVSS: 4.3 Published: 2026-03-25 Modified: 2026-06-17

Description

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user.

Affected Platforms

Apple SafariApple Iphone OsApple IpadosApple VisionosApple WatchosApple Macos

Weakness Type

CWE-497

References