Описание
This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.
Ссылки
- Release NotesVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 26.2 (исключая)Версия до 26.2 (исключая)
Одно из
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 17%
0.00055
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-601
Связанные уязвимости
CVSS3: 9.8
github
около 2 месяцев назад
This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.
EPSS
Процентиль: 17%
0.00055
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-601