Jaydev Ahire

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 macOS versions prior to Tahoe 26 **Description** The issue was addressed with improved handling of caches. A website may be able to access sensor information without user consent. **Recommendations** Update Safari to version 26 or later. Update iOS to version 26 or later. Update iPadOS to version 26 or later. Update tvOS to version 26 or later. Update visionOS to version 26 or later. Update watchOS to version 26 or later. Update macOS to version Tahoe 26 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 18.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 visionOS versions prior to 2.4 macOS Sequoia versions prior to 15.4 **Description** The issue allows a website to bypass Same Origin Policy. This was addressed through improved state management. **Recommendations** For Safari versions prior to 18.4, update to Safari 18.4 or later. For iOS versions prior to 18.4, update to iOS 18.4 or later. For iPadOS versions prior to 18.4, update to iPadOS 18.4 or later. For visionOS versions prior to 2.4, update to visionOS 2.4 or later. For macOS Sequoia versions prior to 15.4, update to macOS Sequoia 15.4 or later.