{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-02T00:50:24.957","vulnerabilities":[{"cve":{"id":"CVE-2026-20643","sourceIdentifier":"product-security@apple.com","published":"2026-03-17T23:16:17.193","lastModified":"2026-03-25T01:17:04.543","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may bypass Same Origin Policy."},{"lang":"es","value":"Se abordó un problema de origen cruzado en la API de Navegación con una validación de entrada mejorada. Este problema se solucionó en las Mejoras de Seguridad en Segundo Plano para iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1 y macOS 26.3.2. El procesamiento de contenido web creado con fines maliciosos podría eludir la Política del Mismo Origen."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*","versionEndExcluding":"26.3.1","matchCriteriaId":"A9117B15-6B46-4C64-BC4A-DDF9D9FBBEB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"26.3.1","matchCriteriaId":"60C61D06-6323-4C2E-96BC-F05F0C459568"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*","versionEndExcluding":"26.3.1","matchCriteriaId":"68370079-081F-40B1-A93F-F2B042B813E4"}]}]}],"references":[{"url":"https://support.apple.com/en-us/126604","source":"product-security@apple.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/126792","source":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/126793","source":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/126794","source":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/126799","source":"product-security@apple.com"},{"url":"https://support.apple.com/en-us/126800","source":"product-security@apple.com"},{"url":"http://seclists.org/fulldisclosure/2026/Mar/10","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}