CVE-2026-20636

MediumCVSS 6.5

Published: 11/02/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A vulnerability in WebKit may cause a process crash when processing maliciously crafted web content. The issue was fixed with improved memory handling in Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3.

Risk Assessment

An attacker could trigger an unexpected process crash, disrupting the browser or any application using WebKit, potentially impacting user productivity.

Recommendation

Immediately update systems to Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, or visionOS 26.3, depending on the platform.

Original NVD description (English source)

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.