Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS
2026-03-18T07:24:10Z•27225b32608d98df6074e704bce1a8db9733dd1138cae18277c6d63ed8633c56
ai-security','langchain','langsmith'amazon-bedrockapparmorbackup-and-replicationchromeclickfixcrackarmorglasswormgnu-inetutilsiosleaknetmacosmacsyncopen-vsxransomwaresame-origin-bypasssandbox-dns-exfiltrationskiasupply-chaintelnetdunauthenticated-rceveeamvulnerabilitywebkitzero-day
What happened
Collection of mid-March 2026 security news: Apple released WebKit fixes for a Navigation API same-origin bypass (CVE-2026-20643). A critical unauthenticated root RCE in GNU InetUtils telnetd (CVE-2026-32746, CVSS 9.8) was disclosed. Veeam patched multiple critical Backup & Replication RCEs (including CVE-2026-21666 and CVE-2026-21667, CVSS 9.9). Google fixed at least one Chrome zero-day (CVE-2026-3909). CISA added an actively exploited Wing FTP info-disclosure bug (CVE-2025-47813) to its KEV list. Researchers also reported widespread supply-chain and malware activity: GlassWorm repo/extension‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 27225b32608d98df6074e704bce1a8db9733dd1138cae18277c6d63ed8633c56
- Enrichment time
- 2026-03-18T07:24:10Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.