SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-64728

MEDIUM · CVSS 6.5 EPSS 0.37%

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

A permissions issue in multiple Apple platforms allows maliciously crafted web content to bypass iframe sandboxing policies, potentially leading to unauthorized access or data exposure. Users of Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS should prioritize updating to version 26.6 to mitigate this vulnerability. Organizations relying on these platforms for web applications or sensitive data should implement the update promptly to safeguard against potential exploitation.

CVE
CVE-2026-64728
Severity
MEDIUM
CVSS
6.5
EPSS
0.37%

Original NVD Description

A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.

Related CVEs

Other vulnerabilities affecting the same vendor(s)