CVE-2026-86898
🔶 mediumSummary
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
CVSS Score
-
EPSS Score
0.2
Exploit Probability
Published Date
2026-09-14
First Seen: 2026-09-16
Last Modified
2026-09-15
Source
NVD 🔗