Description
The issue was addressed with improved UI handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | Safari | < 26.5 | 26.5 |
| Apple | iOS and iPadOS | < 26.5 | 26.5 |
| Apple | macOS | < 26.5 | 26.5 |
| Apple | visionOS | < 26.5 | 26.5 |
Advisories 5
- WID-SEC-2026-1459 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 9, 2026
- WID-SEC-2026-1543 Apple Safari: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 14, 2026
- WID-SEC-2026-1463 Apple macOS Sonoma, macOS Sequoia und macOS Tahoe: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 12, 2026
- NCSC-2026-0139 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · May 12, 2026
- NCSC-2026-0138 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · May 12, 2026