A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious web

Description

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.

Affected Products

Also Affects

Downstream vendors/products affected by this vulnerability

References

• https://support.apple.com/en-us/126792(Release Notes, Vendor Advisory)
• https://support.apple.com/en-us/126793(Release Notes, Vendor Advisory)
• https://support.apple.com/en-us/126794(Release Notes, Vendor Advisory)
• https://support.apple.com/en-us/126799(Release Notes, Vendor Advisory)
• https://support.apple.com/en-us/126800(Release Notes, Vendor Advisory)

Related News (3 articles)