Apple WebKit Malicious Iframe Download Settings Bypass Vulnerability

A vulnerability in WebKit allows a malicious iframe to manipulate another website's download settings. This issue affects multiple Apple platforms, including iOS, iPadOS, macOS Tahoe, and visionOS, all in version 26.5. The vulnerability arises from improper user interface management, which could be exploited to interfere with file downloads.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in download behavior, potentially causing files to be downloaded without user consent or knowledge.