PT-2026-27544

CVE-2026-20691

·

Published

2026-03-24

·

Updated

2026-05-19

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4
Description An authorization issue existed due to improved state management. A specially crafted webpage could potentially fingerprint the user.
Recommendations Update Safari to version 26.4. Update iOS to version 26.4. Update iPadOS to version 26.4. Update macOS Tahoe to version 26.4. Update visionOS to version 26.4. Update watchOS to version 26.4.
Exploitability
Fix
Vendors
Affected products
Related identifiers
ALSA-2026:10702
ALSA-2026:19206
ALSA-2026:9692
OPENSUSE-SU-2026:20518-1
RHSA-2026:10702
RHSA-2026:11329
RHSA-2026:11814
RHSA-2026:13845
RHSA-2026:14659
RHSA-2026:9692
SUSE-SU-2026:1364-1
SUSE-SU-2026:21180-1
USN-8237-1
Found an issue in the description? Have something to add? Feel free to write us 👾