PT-2026-65261 · Apple · Visionos+7

CVE-2026-64728

·

Published

2026-07-27

·

Updated

2026-08-31

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6
Description A permissions issue exists where maliciously crafted web content may violate the iframe sandboxing policy. This is caused by insufficient validation.
Recommendations Update Safari to version 26.6 Update iOS to version 26.6 Update iPadOS to version 26.6 Update macOS Tahoe to version 26.6 Update tvOS to version 26.6 Update visionOS to version 26.6 Update watchOS to version 26.6

Fix

DoS

Protection Mechanism Failure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-64728
ECHO-041C-12C3-789B
USN-8703-1

Affected Products

Apple Macos
Safari
Ios
Ipados
Macos Tahoe
Tvos
Visionos
Watchos