APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2
嗯,用户发来了一段邮件内容,看起来是苹果的安全公告。他让我用中文帮他总结一下,控制在100字以内,而且不需要特定的开头。首先,我需要理解邮件的主要内容。 邮件提到了iOS 26.3.1、iPadOS 26.3.1、macOS 26.3.1和macOS 26.3.2的更新,主要是背景安全改进。WebKit部分有一个漏洞,CVE编号是CVE-2026-20643,影响是处理恶意网页内容可能绕过同源策略。修复方法是改进了输入验证。 接下来,我需要把这些信息浓缩成一句话。要包含操作系统版本、WebKit漏洞、影响和修复措施。同时注意字数限制。 可能的结构:苹果发布安全更新,修复了WebKit中的跨域问题,避免恶意内容绕过同源策略。 检查一下是否符合要求:100字以内,直接描述内容,没有特定开头。看起来没问题。 </think> 苹果发布针对iOS 26.3.1、iPadOS 26.3.1、macOS 26.3.1及macOS 26.3.2的安全更新,修复WebKit组件中的跨域问题,避免恶意网页内容绕过同源策略。 2026-3-19 14:31:16 Author: seclists.org(查看原文) 阅读量:9 收藏

fulldisclosure logo

Full Disclosure mailing list archives


From: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org>
Date: Tue, 17 Mar 2026 16:43:52 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1,
iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2

Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS
26.3.1, and macOS 26.3.2 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/126604.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

iOS 26.3.1 (a), iPadOS 26.3.1 (a), macOS 26.3.1 (a), macOS 26.3.2 (a)

WebKit
Available for: iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, macOS 26.3.2
Impact: Processing maliciously crafted web content may bypass Same
Origin Policy
Description: A cross-origin issue in the Navigation API was addressed
with improved input validation.
WebKit Bugzilla: 306050
CVE-2026-20643: Thomas Espach


All information is also posted on the Apple Security Releases
web site: https://support.apple.com/100100.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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=dtpg
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/


Current thread:

  • APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2 Apple Product Security via Fulldisclosure (Mar 19)

文章来源: https://seclists.org/fulldisclosure/2026/Mar/10
如有侵权请联系:admin#unsafe.sh