PT-2026-27544 · Apple · Safari+4

Published 2026-03-25 · Updated 2026-03-25 · CVE-2026-20691

Mitre

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user.

Related Identifiers

CVE-2026-20691

Affected Products

Safari

Ios/Ipados

Apple Macos

Visionos

Watchos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-20691 · Security Note
• https://support.apple.com/en-us/126798 · Note
• https://support.apple.com/en-us/126799 · Note
• https://support.apple.com/en-us/126800 · Note
• https://support.apple.com/en-us/126794 · Note
• https://support.apple.com/en-us/126792 · Note