Vulnerability in Apple Ios And Ipados

CVE-2026-20643

A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26…

EPSS: 0.000 (9.5th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2026-20643?
CVE-2026-20643 is a vulnerability in Apple Ios And Ipados. Published 2026-03-17.
Is CVE-2026-20643 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.