CVE-2026-28871 | Apple Safari/iOS/iPadOS/macOS up to 26.3 Website cross site scripting (CNNVD-202603-5235)
A vulnerability marked as critical has been reported in Apple Safari, iOS, iPadOS and macOS up to 26.3. This affects an unknown function of the component Website Handler. Performing a manipulation results in cross site scripting.
This vulnerability is known as CVE-2026-28871. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.