CVE-2026-20656
Low · 3.3CVSS
3.3
EPSS
0.1%
Published
Feb 11, 2026
CISA due date
—
The record
A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|