CVEvulnerability
CVE-2026-64778
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-08-17
- Last modified
- 2026-09-14
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-200
Description
The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Visiting a maliciously crafted website may leak sensitive data.
Affected configurations
• apple safari (< 26.6.1)
• apple ipados (< 18.7.10)
• apple ipados (>= 26.0 < 26.6.1)
• apple iphone os (< 18.7.10)
• apple iphone os (>= 26.0 < 26.6.1)
• apple macos (>= 26.0 < 26.6.2)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/148281 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/148282 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/148286 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/148287 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149036 support.apple.com
- https://support.apple.com/en-us/149037 support.apple.com
- https://support.apple.com/en-us/149038 support.apple.com