CVE-2026-20656

No fix known EPSS <1%CVSS 3.3

A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history.

Published 2026-02-11 · CVE record · OSV

Products: apple safari, Apple iOS and iPadOS, Apple macOS