Product:
Safari
Summary
A logic issue was addressed with improved validation. This issue allows an app to potentially access a user’s Safari history. The vulnerability has been fixed in the latest versions of iOS, iPadOS, and macOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-20656 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that can run locally on the user’s device. Once the app is installed, it could leverage the logic flaw to access the user’s Safari history without their consent.
Affected Products
- iOS 18.7.5 – The latest version of Apple’s mobile operating system that includes the fix for this vulnerability.
- iPadOS 18.7.5 – The version for iPads that addresses the logic issue.
- macOS Tahoe 26.3 – The desktop operating system version that resolves the vulnerability.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, and macOS to mitigate the risk associated with this vulnerability. Regularly updating software can help protect against known vulnerabilities.