PT-2026-27544 · Apple+3 · Ios+9

CVE-2026-20691

·

Publicado

2026-03-24

·

Atualizado

2026-05-19

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.4 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Tahoe versions prior to 26.4 visionOS versions prior to 26.4 watchOS versions prior to 26.4
Description An authorization issue existed due to improved state management. A specially crafted webpage could potentially fingerprint the user.
Recommendations Update Safari to version 26.4. Update iOS to version 26.4. Update iPadOS to version 26.4. Update macOS Tahoe to version 26.4. Update visionOS to version 26.4. Update watchOS to version 26.4.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-497

Identificadores relacionados

ALSA-2026:10702
ALSA-2026:19206
ALSA-2026:9692
CVE-2026-20691
OPENSUSE-SU-2026:20518-1
RHSA-2026:10702
RHSA-2026:11329
RHSA-2026:11814
RHSA-2026:13845
RHSA-2026:14659
RHSA-2026:9692
SUSE-SU-2026:1364-1
SUSE-SU-2026:21180-1
USN-8237-1

Produtos afetados

Linuxmint
Apple Macos
Rocky Linux
Safari
Ubuntu
Ios
Ipados
Macos Tahoe
Visionos
Watchos