A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/126347 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/126348 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/126354 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Apr 2026, 19:21
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| Summary | (en) A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history. |
18 Feb 2026, 16:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-285 |
13 Feb 2026, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/126347 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/126348 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/126354 - Release Notes, Vendor Advisory | |
| First Time |
Apple iphone Os
Apple safari Apple ipados Apple Apple macos |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
11 Feb 2026, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-11 23:16
Updated : 2026-04-02 19:21
NVD link : CVE-2026-20656
Mitre link : CVE-2026-20656
CVE.ORG link : CVE-2026-20656
JSON object : View
Products Affected
apple
- safari
- iphone_os
- ipados
- macos
CWE