CVE-2026-28861 vulnerability in Apple Products
Published on March 25, 2026
A logic issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. A malicious website may be able to access script message handlers intended for other origins.
Products Associated with CVE-2026-28861
Want to know whenever a new CVE is published for Apple products? stack.watch will email you.
Affected Versions
Apple Safari:- Before 26.4 is affected.
- Before 18.7.7 is affected.
- Before 26.4 is affected.
- Before 26.4 is affected.
- Before 26.4 is affected.