CVE-2026-84518

No fix known EPSS <1%CVSS 4.3

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.

Published 2026-09-14 · CVE record · OSV

Products: apple safari, Apple iOS and iPadOS, Apple macOS