CVE-2026-20636PATCHED

apple · safari

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lea

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected Products

Vendor	Product	Versions
apple	safari	< 26.3, < 26.3, < 26.3, < 26.3, < 26.3

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
amazon	amazon linux	cert_advisory	90%
debian	debian linux	cert_advisory	90%
open source	webkitgtk	cert_advisory	90%
su	suse linux	cert_advisory	90%

References

https://support.apple.com/en-us/126346(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/126348(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/126353(Release Notes, Vendor Advisory)
https://support.apple.com/en-us/126354(Release Notes, Vendor Advisory)

Related News (2 articles)

Tier B

CERT-FR4d ago

Multiples vulnérabilités dans Oracle Java SE (22 avril 2026)

→ No new info (linked only)

Tier B

BSI Advisories24d ago

[UPDATE] [hoch] WebKitGTK: Mehrere Schwachstellen

→ No new info (linked only)

CVSS 3.16.5 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

26.3

CWECWE-119

PublishedFeb 11, 2026

Last enriched24d ago

Trending Score20

Source articles2

Independent2

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

MEDIUMCVE-2026-28950EXP

CVE-2026-28950: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.8 and iPadOS 18.7.8, iOS 26.

Trending: 78

HIGHCVE-2026-20652

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote attacker ma

Trending: 23

MEDIUMCVE-2026-20635

The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 2

Trending: 20

MEDIUMCVE-2026-20676

CVE-2026-20676: This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3

Trending: 20

MEDIUMCVE-2026-20644

Trending: 20

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Feb 11, 2026

Patch Available

Feb 17, 2026

Discovered by ZDM

Apr 1, 2026