Apple Fixes WebKit Vulnerability Enabling Same
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-41974 | Use-After-Free Kernel Code Execution Flaw in Apple iOS and iPadOS | 7.8 | 2% | KEVPoC | KEV |
| CVE-2023-43000 | Use-After-Free in Apple WebKit: Safari, iOS, iPadOS, macOS (CVE-2023-43000) | 8.8 | 4% | KEVPoC | KEV |
| CVE-2023-43010 | The issue was addressed with improved memory handling | 8.8 | <1% | ||
| CVE-2024-23222 | Apple WebKit Type Confusion Enables Arbitrary Code Execution Across iOS, macOS, tvOS | 8.8 | 11% | KEV | KEV |
| CVE-2026-20643 | A cross-origin issue in the Navigation API was addressed with improved input validation | 5.4 | <1% | ||
| CVE-2026-20700 | Exploited Memory Corruption Flaw in Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS | 7.8 | 2% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS. The vulnerability, tracked as CVE-2026-20643 (CVSS score: N/A), has been described as a cross-origin issue in WebKit's Navigation API that could be exploited to bypass the same-origin policy when processing maliciously crafted web content. The flaw affects iOS 26.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.