This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user…

Medium CVSS 4.3

CVECVE-2026-84518

First seen2026-09-16 04:16 UTC

Disclosed2026-09-14 21:17 UTC

Last updated2026-09-16 04:16 UTC

Channel statusauto

Summary

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://support.apple.com/en-us/149034 Release Notes
https://support.apple.com/en-us/149035 Release Notes
https://support.apple.com/en-us/149039 Release Notes

Timeline

2026-09-16 nvd_ingest NVD