Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-28907

Опубликовано: 11 мая 2026
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия до 18.7.9 (исключая)
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Версия от 26.0 (включая) до 26.5 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия до 18.7.9 (исключая)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Версия от 26.0 (включая) до 26.5 (исключая)
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Версия от 26.0 (включая) до 26.5 (исключая)
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Версия до 26.5 (исключая)
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Версия до 26.5 (исключая)
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Версия до 26.5 (исключая)

EPSS

Процентиль: 22%
0.00304
Низкий

8.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

ubuntu логотип

CVE-2026-28907

CVSS3: 8.1
ubuntu
3 месяца назад

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

redhat логотип

CVE-2026-28907

CVSS3: 6.5
redhat
2 месяца назад

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

debian логотип

CVE-2026-28907

CVSS3: 8.1
debian
3 месяца назад

The issue was addressed with improved input validation. This issue is ...

github логотип

GHSA-gcfw-ghg9-2x22

CVSS3: 8.1
github
3 месяца назад

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

suse-cvrf логотип

openSUSE-SU-2026:21129-1

suse-cvrf
около 1 месяца назад

Security update for webkit2gtk3

EPSS

Процентиль: 22%
0.00304
Низкий

8.1 High

CVSS3

Дефекты

CWE-20