CVE-2026-84518

MEDIUM | Platform: iPadOS | Changelog

CVE Details

Description

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.

CVSS 3.1 Score

Metric	Value
Base Score	4.3 (MEDIUM)
Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N`

Weakness

CWE-642

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/149035 (Release Notes, Vendor Advisory)
https://support.apple.com/en-us/149039 (Release Notes, Vendor Advisory)