High WID-SEC-2026-0848 9 CVEs

Apple Safari: Mehrere Schwachstellen

Published Mar 24, 2026 · Updated May 11, 2026 · Revision 2 · de-DE

Vendor: Apple Product: Safari Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Apple Safari ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.

Product

Safari ist der auf Apple Geräten eingesetzte Web Browser.

Vulnerabilities 9

High 7.5

CVE-2026-28860

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 a…

Apple macOS iOS and iPadOS watchOS macOS iOS

May 11, 2026
Medium 6.5

CVE-2026-20665

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 6.5

CVE-2026-28857

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 5.4

CVE-2026-20643 Public exploit

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Backgro…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 17, 2026
Medium 4.3

CVE-2026-20664

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-20691

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28859

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28861

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 1…

Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu

Mar 25, 2026
Medium 4.3

CVE-2026-28871

A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 25, 2026

Revision history

2026-05-11 #2
CVE-2026-28860 ergänzt
2026-03-24 #1
Initiale Fassung

References

About the security content of Safari 26.4 vom 2026-03-24
https://support.apple.com/en-us/126800