Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-86898

Fixed in a distro release EPSS <1%CVSS 5.4

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

Published 2026-09-14 · CVE record · OSV

Products: apple safari, Apple iOS and iPadOS, Apple macOS, Apple visionOS

Distro releases

ReleasePackageFixed in
Debian:12webkit2gtkno fix
Debian:12wpewebkitno fix
Debian:13webkit2gtk2.54.0-1~deb13u1
Debian:13wpewebkitno fix
Debian:14webkit2gtkno fix
Debian:14wpewebkit2.54.0-1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSwebkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSwebkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSwebkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSwebkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSwebkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSwebkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSwebkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSwebkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSwebkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSwebkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSwebkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSwebkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise Module for Basesystem 15 SP7webkit2gtk3-soup22.54.1-150600.12.81.4
SUSE:Linux Enterprise Module for Basesystem 15 SP7webkit2gtk42.54.1-150600.12.81.4
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7webkit2gtk32.54.1-150600.12.81.3
SUSE:Linux Enterprise Module for Development Tools 15 SP7webkit2gtk42.54.1-150600.12.81.4
SUSE:Linux Enterprise Server 15 SP4-LTSSwebkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise Server 15 SP4-LTSSwebkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise Server 15 SP4-LTSSwebkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise Server 15 SP5-LTSSwebkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise Server 15 SP5-LTSSwebkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise Server 15 SP5-LTSSwebkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise Server 15 SP6-LTSSwebkit2gtk32.54.1-150600.12.81.3
SUSE:Linux Enterprise Server 15 SP6-LTSSwebkit2gtk3-soup22.54.1-150600.12.81.4
SUSE:Linux Enterprise Server 15 SP6-LTSSwebkit2gtk42.54.1-150600.12.81.4
SUSE:Linux Enterprise Server 16.0webkit2gtk32.54.1-160000.1.1
SUSE:Linux Enterprise Server 16.0webkit2gtk42.54.1-160000.1.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4webkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4webkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP4webkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5webkit2gtk32.54.1-150400.4.152.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5webkit2gtk3-soup22.54.1-150400.4.152.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP5webkit2gtk42.54.1-150400.4.152.2
SUSE:Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk32.54.1-150600.12.81.3
SUSE:Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk3-soup22.54.1-150600.12.81.4
SUSE:Linux Enterprise Server for SAP Applications 15 SP6webkit2gtk42.54.1-150600.12.81.4
SUSE:Linux Enterprise Server for SAP applications 16.0webkit2gtk32.54.1-160000.1.1
SUSE:Linux Enterprise Server for SAP applications 16.0webkit2gtk42.54.1-160000.1.1
openSUSE:Leap 16.0webkit2gtk32.54.1-160000.1.1
openSUSE:Leap 16.0webkit2gtk3-soup22.54.1-160000.1.1
openSUSE:Leap 16.0webkit2gtk42.54.1-160000.1.1