CVE-2026-20691

Description

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user.

References

https://support.apple.com/en-us/126800

https://support.apple.com/en-us/126799

https://support.apple.com/en-us/126798

https://support.apple.com/en-us/126794

https://support.apple.com/en-us/126792

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3