PT-2026-7799

CVE-2026-20676

·

Published

2026-02-11

·

Updated

2026-05-19

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 26.3 Apple iOS versions prior to 26.3 Apple iPadOS versions prior to 26.3 Apple macOS Tahoe versions prior to 26.3 Apple visionOS versions prior to 26.3
Description A website may be able to track users through Safari web extensions due to improved state management.
Recommendations Update Apple Safari to version 26.3. Update Apple iOS to version 26.3. Update Apple iPadOS to version 26.3. Update Apple macOS Tahoe to version 26.3. Update Apple visionOS to version 26.3.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:10702
ALSA-2026:19206
ALSA-2026:9692
BIT-JAVA-2026-20676
BIT-JAVA-MIN-2026-20676
BIT-JRE-2026-20676
MGASA-2026-0064
OPENSUSE-SU-2026:20518-1
RHSA-2026:10702
RHSA-2026:11329
RHSA-2026:11814
RHSA-2026:13845
RHSA-2026:14659
RHSA-2026:22136
RHSA-2026:9692
SUSE-SU-2026:1139-1
SUSE-SU-2026:1150-1
SUSE-SU-2026:1364-1
SUSE-SU-2026:21180-1
USN-8237-1
Found an issue in the description? Have something to add? Feel free to write us 👾