CVE-2026-28971

Description

The issue was addressed with improved UI handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. A malicious iframe may use another website’s download settings.

References

https://isc.sans.edu/diary/rss/32976

https://support.apple.com/en-us/127120

https://support.apple.com/en-us/127115

https://support.apple.com/en-us/127110

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3