Medium severity6.5NVD Advisory· Published Sep 14, 2026· Updated Sep 15, 2026
CVE-2026-64753
CVE-2026-64753
Description
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.
Affected products
14cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: =27
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: =27
- Range: =27
- osv-coords4 versionspkg:rpm/almalinux/webkit2gtk3pkg:rpm/almalinux/webkit2gtk3-develpkg:rpm/almalinux/webkit2gtk3-jscpkg:rpm/almalinux/webkit2gtk3-jsc-devel
< 2.54.0-1.el9_8+ 3 more
- (no CPE)range: < 2.54.0-1.el9_8
- (no CPE)range: < 2.54.0-1.el9_8
- (no CPE)range: < 2.54.0-1.el9_8
- (no CPE)range: < 2.54.0-1.el9_8
Patches
Vulnerability mechanics
References
6- support.apple.com/en-us/149034nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149035nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149036nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149037nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149038nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149039nvdRelease NotesVendor Advisory
News mentions
2- Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its DevicesCyber Security News · Sep 15, 2026
- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026