Medium severity6.5NVD Advisory· Published Mar 25, 2026· Updated Jun 17, 2026
CVE-2026-20665
CVE-2026-20665
Description
This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
440+ 2 more
- (no CPE)range: 0
- (no CPE)range: 26.4
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <26.4
0+ 1 more
- (no CPE)range: 0
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <26.4
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: 26.4
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <26.4
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: 26.4
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <26.4
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: 26.4
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <26.4
- Range: 26.4
- Range: 18.7.7, 26.4
18.7.7, 26.4+ 1 more
- (no CPE)range: 18.7.7, 26.4
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <18.7.7
- Range: 0
- osv-coords24 versionspkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP7pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2016.0pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSSpkg:rpm/almalinux/webkit2gtk3pkg:rpm/almalinux/webkit2gtk3-develpkg:rpm/almalinux/webkit2gtk3-jscpkg:rpm/almalinux/webkit2gtk3-jsc-develpkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/webkit2gtk4&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.6
< 2.52.1-150600.12.63.1+ 23 more
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-160000.1.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.3-1.el8_10
- (no CPE)range: < 2.52.3-1.el8_10
- (no CPE)range: < 2.52.3-1.el8_10
- (no CPE)range: < 2.52.3-1.el8_10
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
- (no CPE)range: < 2.52.1-150600.12.63.1
Patches
Vulnerability mechanics
References
7- support.apple.com/en-us/126792nvdRelease NotesVendor Advisory
- support.apple.com/en-us/126793nvdRelease NotesVendor Advisory
- support.apple.com/en-us/126794nvdRelease NotesVendor Advisory
- support.apple.com/en-us/126797nvdRelease NotesVendor Advisory
- support.apple.com/en-us/126798nvdRelease NotesVendor Advisory
- support.apple.com/en-us/126799nvdRelease NotesVendor Advisory
- support.apple.com/en-us/126800nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.