CVE-2026-20608

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: HanQing from TSDubhe and Nan Wang (@eternalsakura13)

Attribute	Value
CVE	CVE-2026-20608
Bugzilla	303357
Component	JSC
Bug Class	LogicError
Severity	medium
Commit	672cdd38781cce18…
Advisory	Apple Advisory

Root Cause Analysis

This issue was addressed through improved state management.

Files Changed

Source Files

• Source/JavaScriptCore/runtime/PropertyTable.cpp

Test Files

• JSTests/stress/private-names-seal-freeze.js