{"id":"EUVD-2026-40186","enisaUuid":"c05427ed-6aa2-30d4-8e67-43ce755a8842","description":"The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.","datePublished":"Jun 29, 2026, 7:42:44 PM","dateUpdated":"Aug 17, 2026, 9:29:18 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\nhttps://support.apple.com/en-us/148287\n","aliases":"CVE-2026-43735\nGHSA-jh53-f58v-32wv\n","assigner":"apple","epss":0.23,"enisaIdProduct":[{"id":"46015f4e-9e83-353e-bd8c-8e7ed036c9bd","product":{"name":"Safari","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"473de647-ad38-31d3-a5b5-b6a63e3cb9bf","product":{"name":"macOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"6b9498ad-a903-34be-b5b1-5697799a7279","product":{"name":"watchOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"78099e62-42d4-33a9-8cf3-d44421ae0eda","product":{"name":"tvOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"936d25c5-b42f-39ad-98ff-5a959d11fc09","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c18.7.10"},{"id":"ae0d1664-011c-3423-9905-1f1ed3b9a02c","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"c867ed27-facb-3e23-b2ff-a4398fdcab20","product":{"name":"visionOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"}],"enisaIdVendor":[{"id":"e56bc3be-34a1-3dda-b04b-4e5f47d7bc1f","vendor":{"name":"Apple"}}],"enisaIdVulnerability":[{"id":"1c817ad4-33ce-3e0a-bcf7-ad092e8b11c7","vulnerability":{"id":"GHSA-jh53-f58v-32wv","description":"The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may exfiltrate data cross-origin.","datePublished":"Jun 29, 2026, 9:32:14 PM","dateUpdated":"Aug 18, 2026, 12:30:28 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-43735\nhttps://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\nhttps://support.apple.com/en-us/148287\n","enisa_id":"EUVD-2026-40186\n","aliases":"CVE-2026-43735\nGHSA-jh53-f58v-32wv\n","epss":0.0,"dataProcessed":"Oct 4, 2026, 1:52:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"dadc87c7-b8c1-3a61-ae85-5f8339ef9d78","vulnerability":{"id":"CVE-2026-43735","description":"The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.","datePublished":"Jun 29, 2026, 7:42:44 PM","dateUpdated":"Aug 17, 2026, 9:29:18 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\nhttps://support.apple.com/en-us/148287\n","enisa_id":"EUVD-2026-40186\n","assigner":"apple","epss":0.23,"dataProcessed":"Oct 10, 2026, 7:13:36 AM","vulnerabilityProduct":[{"id":"08b64ebc-dd65-31f4-8334-01d951fa4d71","product":{"name":"Safari","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"49cebe5d-d13b-3ec0-9266-8723b8e50dbe","product":{"name":"watchOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"af1d4e13-da4f-32fa-a81e-7cd2a9c578ad","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c18.7.10"},{"id":"b14f3bec-f08d-3a04-af6e-b0e6f16bc45d","product":{"name":"tvOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"da34902e-efba-3f79-96b6-2f09dfe6b2aa","product":{"name":"macOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"e62aab80-778d-3208-9275-e7eb2a64ca2c","product":{"name":"visionOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"fb5b0d87-779d-31ae-8514-556ea87ebe8f","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"}],"vulnerabilityVendor":[{"id":"6b2ff13f-a158-311c-b339-6a8278839888","vendor":{"name":"Apple"}}]}}],"enisaIdAdvisory":[{"id":"31bb44bd-f44f-3593-a12b-01e68d625e0a","advisory":{"id":"NCSC-2026-0214","description":"Kwetsbaarheden verholpen in Apple MacOS","datePublished":"Jun 30, 2026, 11:47:30 AM","dateUpdated":"Jun 30, 2026, 11:47:30 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-28979\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43703\nCVE-2026-43704\nCVE-2026-43705\nCVE-2026-43706\nCVE-2026-43707\nCVE-2026-43708\nCVE-2026-43709\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43717\nCVE-2026-43718\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43722\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43743\nCVE-2026-43745\nCVE-2026-43746\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"383e5cac-c8a8-3b54-aa94-bb49d81c7296","product":{"name":"macOS Tahoe","vendor":{"name":"Apple"}}}]}},{"id":"88c2b3bb-5e49-3d4b-82ce-1a383924ff94","advisory":{"id":"NCSC-2026-0215","description":"Kwetsbaarheden verholpen in Apple iOS en iPadOS","datePublished":"Jun 30, 2026, 11:48:34 AM","dateUpdated":"Jun 30, 2026, 11:48:34 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-28979\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43703\nCVE-2026-43704\nCVE-2026-43705\nCVE-2026-43706\nCVE-2026-43707\nCVE-2026-43708\nCVE-2026-43709\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43717\nCVE-2026-43718\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43722\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43743\nCVE-2026-43745\nCVE-2026-43746\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"2a0ce2ad-90a1-383b-a162-78ddc34c0510","product":{"name":"iPadOS","vendor":{"name":"Apple"}}},{"id":"3fe6363b-8912-31a5-9fef-cb40a62733bc","product":{"name":"IOS","vendor":{"name":"Cisco"}}}]}},{"id":"c84209ff-6deb-33c9-9b5b-5854ed68c865","advisory":{"id":"NCSC-2026-0319","description":"Kwetsbaarheden verholpen in Apple iOS en iPadOS","datePublished":"Aug 20, 2026, 6:59:08 AM","dateUpdated":"Aug 20, 2026, 6:59:08 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-3783\nCVE-2026-3784\nCVE-2026-4424\nCVE-2026-28947\nCVE-2026-28958\nCVE-2026-28973\nCVE-2026-28979\nCVE-2026-28984\nCVE-2026-28990\nCVE-2026-28996\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-39877\nCVE-2026-43658\nCVE-2026-43661\nCVE-2026-43663\nCVE-2026-43667\nCVE-2026-43673\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43705\nCVE-2026-43708\nCVE-2026-43711\nCVE-2026-43714\nCVE-2026-43717\nCVE-2026-43720\nCVE-2026-43722\nCVE-2026-43723\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43729\nCVE-2026-43731\nCVE-2026-43733\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43738\nCVE-2026-43742\nCVE-2026-43744\nCVE-2026-43745\nCVE-2026-43754\nCVE-2026-43757\nCVE-2026-43769\nCVE-2026-43776\nCVE-2026-43778\nCVE-2026-43794\nCVE-2026-43795\nCVE-2026-43796\nCVE-2026-43797\nCVE-2026-43799\nCVE-2026-43800\nCVE-2026-43801\nCVE-2026-43802\nCVE-2026-43803\nCVE-2026-43807\nCVE-2026-43809\nCVE-2026-43810\nCVE-2026-43811\nCVE-2026-43812\nCVE-2026-43818\nCVE-2026-43821\nCVE-2026-43822\nCVE-2026-64692\nCVE-2026-64693\nCVE-2026-64695\nCVE-2026-64700\nCVE-2026-64707\nCVE-2026-64709\nCVE-2026-64715\nCVE-2026-64716\nCVE-2026-64719\nCVE-2026-64721\nCVE-2026-64722\nCVE-2026-64723\nCVE-2026-64724\nCVE-2026-64725\nCVE-2026-64726\nCVE-2026-64732\nCVE-2026-64734\nCVE-2026-64735\nCVE-2026-64738\nCVE-2026-64739\nCVE-2026-64740\nCVE-2026-64742\nCVE-2026-64743\nCVE-2026-64744\nCVE-2026-64746\nCVE-2026-64747\nCVE-2026-64749\nCVE-2026-64755\nCVE-2026-64757\nCVE-2026-64760\nCVE-2026-64762\nCVE-2026-64763\nCVE-2026-64764\nCVE-2026-64765\nCVE-2026-64766\nCVE-2026-64768\nCVE-2026-64769\nCVE-2026-64770\nCVE-2026-64771\nCVE-2026-64772\nCVE-2026-64774\nCVE-2026-64778\nCVE-2026-64779\nCVE-2026-64780\nCVE-2026-64781\nCVE-2026-64782\nCVE-2026-64784\nCVE-2026-65331\nCVE-2026-65332\nCVE-2026-65333\nCVE-2026-65334\nCVE-2026-65335\nCVE-2026-65336\nCVE-2026-65337\nCVE-2026-65338\nCVE-2026-65340\nCVE-2026-65341\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"2430dab2-3577-3e86-a347-66316438f032","product":{"name":"iPadOS","vendor":{"name":"Apple"}}},{"id":"ba12593f-396d-3b84-98ca-ea613330860e","product":{"name":"IOS","vendor":{"name":"Cisco"}}}]}}]}