Apple Safari Vulnerabilities Allow Bypass, DoS, Disclosure, XSS

This advisory from CERT-Bund details multiple critical vulnerabilities (CVSS Base Score 8.3) affecting Apple Safari versions prior to 26.4. The vulnerabilities allow for security bypass, denial-of-service, information disclosure, and cross-site scripting attacks. The advisory notes that these issues are exploitable remotely and affect Safari on Linux, other operating systems, and UNIX.

Users and organizations running affected versions of Apple Safari, particularly those on non-Apple operating systems or UNIX environments, should apply the latest security updates provided by Apple as soon as possible. While the advisory does not specify a compliance deadline, prompt patching is crucial to mitigate the risk of exploitation and protect against potential data breaches or system compromise. The advisory indicates that mitigation is available, implying that applying updates is the primary mitigation strategy.