Apple WebKit Vulnerability Allowing Restricted Content Processing Outside the Sandbox

A vulnerability in WebKit, the engine used by Safari, has been identified that allows a malicious website to process restricted web content outside of its designated sandbox. This issue could potentially be exploited to access or manipulate data in ways that are normally restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized access to restricted web content, bypassing the usual sandbox protections.

Remediation

This vulnerability has been fixed in Safari 26.4, as well as in the latest versions of iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. Users should update to these versions to address the vulnerability.