The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20652US | high7.5 | — | ||
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3.… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2026:10702WEB
- https://access.redhat.com/errata/RHSA-2026:11329WEB
- https://access.redhat.com/errata/RHSA-2026:11814WEB
- https://access.redhat.com/errata/RHSA-2026:13845WEB
- https://access.redhat.com/errata/RHSA-2026:14659WEB
- https://access.redhat.com/errata/RHSA-2026:16056WEB
- https://access.redhat.com/errata/RHSA-2026:16695WEB
- https://access.redhat.com/errata/RHSA-2026:19206WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan