Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-20691

Fixed in a distro release EPSS <1%CVSS 4.3

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user.

Published 2026-03-25 · CVE record · OSV

Products: apple safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS, Apple watchOS

Distro releases

ReleasePackageFixed in
AlmaLinux 8webkit2gtk32.52.3-1.el8_10
AlmaLinux 8webkit2gtk3-devel2.52.3-1.el8_10
AlmaLinux 8webkit2gtk3-jsc2.52.3-1.el8_10
AlmaLinux 8webkit2gtk3-jsc-devel2.52.3-1.el8_10
AlmaLinux 9webkit2gtk32.52.3-0.el9_7.1
AlmaLinux 9webkit2gtk32.52.3-1.el9_8
AlmaLinux 9webkit2gtk3-devel2.52.3-1.el9_8
AlmaLinux 9webkit2gtk3-devel2.52.3-0.el9_7.1
AlmaLinux 9webkit2gtk3-jsc2.52.3-0.el9_7.1
AlmaLinux 9webkit2gtk3-jsc2.52.3-1.el9_8
AlmaLinux 9webkit2gtk3-jsc-devel2.52.3-1.el9_8
AlmaLinux 9webkit2gtk3-jsc-devel2.52.3-0.el9_7.1
Debian 12webkit2gtkno fix
Debian 12wpewebkitno fix
Debian 13webkit2gtk2.52.3-2~deb13u1
Debian 13wpewebkitno fix
Debian 14webkit2gtk2.52.1-1
Debian 14wpewebkit2.52.1-1
Red Hat Enterprise Linux 8webkit2gtk30:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-debuginfo0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-debugsource0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-devel0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc-devel0:2.52.3-1.el8_10
Red Hat Enterprise Linux 8webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_10
Red Hat Enterprise Linux 9webkit2gtk30:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk30:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-debuginfo0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-debuginfo0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-debugsource0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-debugsource0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-devel0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-devel0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-devel-debuginfo0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-devel-debuginfo0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-jsc0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-jsc0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-jsc-debuginfo0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-jsc-debuginfo0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-jsc-devel0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-jsc-devel0:2.52.3-1.el9_8
Red Hat Enterprise Linux 9webkit2gtk3-jsc-devel-debuginfo0:2.52.3-0.el9_7.1
Red Hat Enterprise Linux 9webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el9_8
Red Hat rhel aus 8.4webkit2gtk30:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-debuginfo0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-debugsource0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-devel0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc-devel0:2.52.3-1.el8_4
Red Hat rhel aus 8.4webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_4
Red Hat rhel aus 8.6webkit2gtk30:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-debuginfo0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-debugsource0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-devel0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc-devel0:2.52.3-1.el8_6
Red Hat rhel aus 8.6webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk30:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-debuginfo0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-debugsource0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-devel0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc-devel0:2.52.3-1.el8_6
Red Hat rhel e4s 8.6webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_6
Red Hat rhel e4s 8.8webkit2gtk30:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-debuginfo0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-debugsource0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-devel0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc-devel0:2.52.3-1.el8_8
Red Hat rhel e4s 8.8webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_8
Red Hat rhel e4s 9.0webkit2gtk30:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-debuginfo0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-debugsource0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-devel0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-devel-debuginfo0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc-debuginfo0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc-devel0:2.52.3-1.el9_0
Red Hat rhel e4s 9.0webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el9_0
Red Hat rhel e4s 9.2webkit2gtk30:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-debuginfo0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-debugsource0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-devel0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-devel-debuginfo0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc-debuginfo0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc-devel0:2.52.3-1.el9_2
Red Hat rhel e4s 9.2webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el9_2
Red Hat rhel els 7webkitgtk40:2.52.3-1.el7_9
Red Hat rhel els 7webkitgtk4-debuginfo0:2.52.3-1.el7_9
Red Hat rhel els 7webkitgtk4-devel0:2.52.3-1.el7_9
Red Hat rhel els 7webkitgtk4-doc0:2.52.3-1.el7_9
Red Hat rhel els 7webkitgtk4-jsc0:2.52.3-1.el7_9
Red Hat rhel els 7webkitgtk4-jsc-devel0:2.52.3-1.el7_9
Red Hat rhel eus 9.4webkit2gtk30:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-debuginfo0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-debugsource0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-devel0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-devel-debuginfo0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc-debuginfo0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc-devel0:2.52.3-1.el9_4
Red Hat rhel eus 9.4webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el9_4
Red Hat rhel eus 9.6webkit2gtk30:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-debuginfo0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-debugsource0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-devel0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-devel-debuginfo0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc-debuginfo0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc-devel0:2.52.3-1.el9_6
Red Hat rhel eus 9.6webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el9_6
Red Hat rhel eus long life 8.4webkit2gtk30:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-debuginfo0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-debugsource0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-devel0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc-devel0:2.52.3-1.el8_4
Red Hat rhel eus long life 8.4webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_4
Red Hat rhel tus 8.6webkit2gtk30:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-debuginfo0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-debugsource0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-devel0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc-devel0:2.52.3-1.el8_6
Red Hat rhel tus 8.6webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_6
Red Hat rhel tus 8.8webkit2gtk30:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-debuginfo0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-debugsource0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-devel0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-devel-debuginfo0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc-debuginfo0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc-devel0:2.52.3-1.el8_8
Red Hat rhel tus 8.8webkit2gtk3-jsc-devel-debuginfo0:2.52.3-1.el8_8
Rocky Linux 8webkit2gtk30:2.52.3-1.el8_10
Rocky Linux 9webkit2gtk30:2.52.3-1.el9_8
Rocky Linux 9webkit2gtk30:2.52.3-0.el9_7.1
SUSE Linux Enterprise Module for Basesystem 15 SP7webkit2gtk3-soup22.52.1-150600.12.63.1
SUSE Linux Enterprise Module for Basesystem 15 SP7webkit2gtk42.52.1-150600.12.63.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7webkit2gtk32.52.1-150600.12.63.1
SUSE Linux Enterprise Module for Development Tools 15 SP7webkit2gtk42.52.1-150600.12.63.1
SUSE Linux Enterprise Server 15 SP6-LTSSwebkit2gtk32.52.1-150600.12.63.1
SUSE Linux Enterprise Server 15 SP6-LTSSwebkit2gtk3-soup22.52.1-150600.12.63.1
SUSE Linux Enterprise Server 15 SP6-LTSSwebkit2gtk42.52.1-150600.12.63.1
SUSE Linux Enterprise Server 16.0webkit2gtk32.52.1-160000.1.1
SUSE Linux Enterprise Server 16.0webkit2gtk42.52.1-160000.1.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk32.52.1-150600.12.63.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk3-soup22.52.1-150600.12.63.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk42.52.1-150600.12.63.1
SUSE Linux Enterprise Server for SAP applications 16.0webkit2gtk32.52.1-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0webkit2gtk42.52.1-160000.1.1
Ubuntu 16.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 16.04 LTSqtwebkit-sourceno fix
Ubuntu 16.04 LTSwebkit2gtkno fix
Ubuntu 16.04 LTSwebkitgtkno fix
Ubuntu 18.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 18.04 LTSqtwebkit-sourceno fix
Ubuntu 18.04 LTSwebkit2gtkno fix
Ubuntu 18.04 LTSwebkitgtkno fix
Ubuntu 20.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 20.04 LTSwebkit2gtkno fix
Ubuntu 20.04 LTSwpewebkitno fix
Ubuntu 22.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 22.04 LTSwebkit2gtkno fix
Ubuntu 22.04 LTSwpewebkitno fix
Ubuntu 24.04 LTSqtwebkit-opensource-srcno fix
Ubuntu 24.04 LTSwebkit2gtk2.52.3-0ubuntu0.24.04.1
Ubuntu 25.10webkit2gtk2.52.3-0ubuntu0.25.10.1
Ubuntu 26.04 LTSwebkit2gtk2.52.3-0ubuntu0.26.04.2
openSUSE Leap 15.6webkit2gtk32.52.1-150600.12.63.1
openSUSE Leap 15.6webkit2gtk3-soup22.52.1-150600.12.63.1
openSUSE Leap 15.6webkit2gtk42.52.1-150600.12.63.1
openSUSE Leap 16.0webkit2gtk32.52.1-160000.1.1
openSUSE Leap 16.0webkit2gtk3-soup22.52.1-160000.1.1
openSUSE Leap 16.0webkit2gtk42.52.1-160000.1.1