Описание
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.
Ссылки
- Vendor AdvisoryRelease Notes
- Vendor AdvisoryRelease Notes
- Vendor AdvisoryRelease Notes
- Vendor AdvisoryRelease Notes
Уязвимые конфигурации
Конфигурация 1Версия до 26.5 (исключая)Версия до 18.7.9 (исключая)Версия от 26.0 (включая) до 26.5 (исключая)Версия до 18.7.9 (исключая)Версия от 26.0 (включая) до 26.5 (исключая)Версия от 26.0 (включая) до 26.5 (исключая)
Одно из
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00234
Низкий
8.8 High
CVSS3
Дефекты
CWE-693
Связанные уязвимости
CVSS3: 8.8
debian
около 2 месяцев назад
A Content Security Policy bypass was addressed with improved enforceme ...
CVSS3: 8.8
github
около 2 месяцев назад
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.
EPSS
Процентиль: 13%
0.00234
Низкий
8.8 High
CVSS3
Дефекты
CWE-693