Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-28861

Опубликовано: 25 мар. 2026
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Версия до 26.4 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия до 18.7.7 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия от 26.0 (включая) до 26.4 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия до 18.7.7 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия от 26.0 (включая) до 26.4 (исключая)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Версия до 26.4 (исключая)
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Версия до 26.4 (исключая)

EPSS

Процентиль: 24%
0.0031
Низкий

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-79
CWE-346

Связанные уязвимости

CVSS3: 4.3
ubuntu
5 месяцев назад

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.

CVSS3: 4.3
redhat
5 месяцев назад

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.

CVSS3: 4.3
debian
5 месяцев назад

A logic issue was addressed with improved state management. This issue ...

CVSS3: 4.3
github
5 месяцев назад

A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.

suse-cvrf
4 месяца назад

Security update for webkit2gtk3

EPSS

Процентиль: 24%
0.0031
Низкий

4.3 Medium

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-79
CWE-346