CVE-2026-20676General(apple / ipados)

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch apple ipados systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

This issue was addressed through improved state management. This issue is fixed in Safari 26.3, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions.

apple CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
safari

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

apple

Products

ipadosiphone_osmacossafarivisionos

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

General

150.0%

Patch

150.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds239d
General
CVE-2026-20676 Safari Web Extension Tracking Vulnerability in Apple Platforms Be... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20676 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The text identifies CVE-2026-20676 and provides a link to a vulnerability details page but offers no further technical, exploit, or mitigation information.
0000042
4.0K followersView on X
CVE@CVEnew239d
Patch
CVE-2026-20676 This issue was addressed through improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. A website m… https://www.cve.org/CVERecord?id=CVE-2026-20676
Post summary
The CVE is noted as fixed in the latest Apple operating system releases, with no PoC, exploit, or active exploitation reported.
00000229
56.5K followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
App	apple	safari	-	-	-
OS	apple	visionos	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities