CVE-2026-20636

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

References

https://support.apple.com/en-us/126354

https://support.apple.com/en-us/126353

https://support.apple.com/en-us/126348

https://support.apple.com/en-us/126346

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-20636.json

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-5926

https://bugzilla.redhat.com/show_bug.cgi?id=2448791

https://access.redhat.com/security/cve/CVE-2026-20636

https://access.redhat.com/errata/RHSA-2026:9692

https://access.redhat.com/errata/RHSA-2026:22136

https://access.redhat.com/errata/RHSA-2026:19535

https://access.redhat.com/errata/RHSA-2026:19206

https://access.redhat.com/errata/RHSA-2026:16695

https://access.redhat.com/errata/RHSA-2026:16056

https://access.redhat.com/errata/RHSA-2026:14659

https://access.redhat.com/errata/RHSA-2026:13845

https://access.redhat.com/errata/RHSA-2026:11814

https://access.redhat.com/errata/RHSA-2026:11329

https://access.redhat.com/errata/RHSA-2026:10702

Details

Source: Mitre, NVD

Named Vulnerability: GHSA-wx45-vx6h-76cq

Risk Information

CVSS v2

CVSS v3

EPSS