{"id":"EUVD-2026-40186","enisaUuid":"c05427ed-6aa2-30d4-8e67-43ce755a8842","description":"The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.","datePublished":"Jun 29, 2026, 7:42:44 PM","dateUpdated":"Jul 27, 2026, 8:12:12 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\n","aliases":"CVE-2026-43735\nGHSA-jh53-f58v-32wv\n","assigner":"apple","epss":0.3,"enisaIdProduct":[{"id":"46015f4e-9e83-353e-bd8c-8e7ed036c9bd","product":{"name":"Safari","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"473de647-ad38-31d3-a5b5-b6a63e3cb9bf","product":{"name":"macOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"6b9498ad-a903-34be-b5b1-5697799a7279","product":{"name":"watchOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"78099e62-42d4-33a9-8cf3-d44421ae0eda","product":{"name":"tvOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"ae0d1664-011c-3423-9905-1f1ed3b9a02c","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"c867ed27-facb-3e23-b2ff-a4398fdcab20","product":{"name":"visionOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"}],"enisaIdVendor":[{"id":"e56bc3be-34a1-3dda-b04b-4e5f47d7bc1f","vendor":{"name":"Apple"}}],"enisaIdVulnerability":[{"id":"1c817ad4-33ce-3e0a-bcf7-ad092e8b11c7","vulnerability":{"id":"GHSA-jh53-f58v-32wv","description":"The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may exfiltrate data cross-origin.","datePublished":"Jun 29, 2026, 9:32:14 PM","dateUpdated":"Jul 27, 2026, 9:31:10 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-43735\nhttps://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\n","enisa_id":"EUVD-2026-40186\n","aliases":"CVE-2026-43735\nGHSA-jh53-f58v-32wv\n","epss":0.0,"dataProcessed":"Aug 2, 2026, 3:30:36 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"dadc87c7-b8c1-3a61-ae85-5f8339ef9d78","vulnerability":{"id":"CVE-2026-43735","description":"The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.","datePublished":"Jun 29, 2026, 7:42:44 PM","dateUpdated":"Jul 27, 2026, 8:12:12 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":"https://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\n","enisa_id":"EUVD-2026-40186\n","assigner":"apple","epss":0.3,"dataProcessed":"Aug 6, 2026, 7:23:49 AM","vulnerabilityProduct":[{"id":"08b64ebc-dd65-31f4-8334-01d951fa4d71","product":{"name":"Safari","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"49cebe5d-d13b-3ec0-9266-8723b8e50dbe","product":{"name":"watchOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"b14f3bec-f08d-3a04-af6e-b0e6f16bc45d","product":{"name":"tvOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"da34902e-efba-3f79-96b6-2f09dfe6b2aa","product":{"name":"macOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"e62aab80-778d-3208-9275-e7eb2a64ca2c","product":{"name":"visionOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"fb5b0d87-779d-31ae-8514-556ea87ebe8f","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"}],"vulnerabilityVendor":[{"id":"6b2ff13f-a158-311c-b339-6a8278839888","vendor":{"name":"Apple"}}]}}],"enisaIdAdvisory":[{"id":"31bb44bd-f44f-3593-a12b-01e68d625e0a","advisory":{"id":"NCSC-2026-0214","description":"Kwetsbaarheden verholpen in Apple MacOS","datePublished":"Jun 30, 2026, 11:47:30 AM","dateUpdated":"Jun 30, 2026, 11:47:30 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-28979\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43703\nCVE-2026-43704\nCVE-2026-43705\nCVE-2026-43706\nCVE-2026-43707\nCVE-2026-43708\nCVE-2026-43709\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43717\nCVE-2026-43718\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43722\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43743\nCVE-2026-43745\nCVE-2026-43746\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"383e5cac-c8a8-3b54-aa94-bb49d81c7296","product":{"name":"macOS Tahoe","vendor":{"name":"Apple"}}}]}},{"id":"88c2b3bb-5e49-3d4b-82ce-1a383924ff94","advisory":{"id":"NCSC-2026-0215","description":"Kwetsbaarheden verholpen in Apple iOS en iPadOS","datePublished":"Jun 30, 2026, 11:48:34 AM","dateUpdated":"Jun 30, 2026, 11:48:34 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-28979\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43703\nCVE-2026-43704\nCVE-2026-43705\nCVE-2026-43706\nCVE-2026-43707\nCVE-2026-43708\nCVE-2026-43709\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43717\nCVE-2026-43718\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43722\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43743\nCVE-2026-43745\nCVE-2026-43746\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"2a0ce2ad-90a1-383b-a162-78ddc34c0510","product":{"name":"iPadOS","vendor":{"name":"Apple"}}},{"id":"3fe6363b-8912-31a5-9fef-cb40a62733bc","product":{"name":"IOS","vendor":{"name":"Cisco"}}}]}}]}