CVE-2026-20656 - A logic issue was addressed with improved validation

Back Back to CVE browser

LOW

A logic issue was addressed with improved validation

Published Feb 11, 2026

3.3

LOW

CVSS 3.1

EPSS 0.12%

Description

A logic issue was addressed with improved validation. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, macOS Tahoe 26.3. An app may be able to access a user's Safari history.

Affected products

Vendor Apple Product Safari Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <26.3
Vendor Apple Product iOS and iPadOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <18.7
Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <26.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

Safari

n/a

Version	Status	Constraints
unspecified	affected	<26.3

Apple

iOS and iPadOS

n/a

Version	Status	Constraints
unspecified	affected	<18.7

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<26.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-285

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-6234
Advisory
https://support.apple.com/en-us/126347
Release NotesVendor Advisory
https://support.apple.com/en-us/126348
Release NotesVendor Advisory
https://support.apple.com/en-us/126354
Release NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-6234		Advisory
https://support.apple.com/en-us/126347		Release NotesVendor Advisory
https://support.apple.com/en-us/126348		Release NotesVendor Advisory
https://support.apple.com/en-us/126354		Release NotesVendor Advisory