{"schema_version":"1.7.5","id":"CVE-2026-20676","published":"2026-02-11T23:16:09.990Z","modified":"2026-06-05T16:59:33.778231525Z","aliases":["BIT-java-2026-20676","BIT-java-min-2026-20676","BIT-jre-2026-20676"],"related":["ALSA-2026:10702","ALSA-2026:19206","ALSA-2026:9692","CGA-55g9-9fxp-9328","SUSE-SU-2026:1139-1","SUSE-SU-2026:1150-1","SUSE-SU-2026:1364-1","SUSE-SU-2026:21180-1","openSUSE-SU-2026:20518-1"],"details":"This issue was addressed through improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions.","affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-20676.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"26.3"}]},{"events":[{"introduced":"0"},{"fixed":"26.3"}]},{"events":[{"introduced":"0"},{"fixed":"26.3"}]},{"events":[{"introduced":"0"},{"fixed":"26.3"}]},{"events":[{"introduced":"0"},{"fixed":"26.3"}]}]}}],"references":[{"type":"ADVISORY","url":"https://support.apple.com/en-us/126346"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/126348"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/126353"},{"type":"ADVISORY","url":"https://support.apple.com/en-us/126354"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}