CVE-2026-20691
Overview
Advisory: Apple Security Advisory
Impact:
Description: A maliciously crafted webpage may be able to fingerprint the user
Researchers: Gongyu Ma (@Mezone0)
| Attribute | Value |
|---|---|
| CVE | CVE-2026-20691 |
| Bugzilla | 306827 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | medium |
| Commit | dfe2e0efc8182466… |
| Advisory | Apple Advisory |
Root Cause Analysis
An authorization issue was addressed with improved state management.
Files Changed
Source Files
Source/WebKit/NetworkProcess/NetworkResourceLoadParameters.cppSource/WebKit/NetworkProcess/NetworkResourceLoadParameters.hSource/WebKit/WebProcess/Network/WebLoaderStrategy.cpp