I forgot about this and checked the Apple security updates website with the release notes. Interestingly (unless I missed it) in 15.7.5 it doesn’t mention CVE-2026-20643
https://support.apple.com/en-us/126795, but the Safari update for Sonoma/Sequoia does
https://support.apple.com/en-us/126800, which appears to match what was listed in the iOS/macOS 26 “background security improvement
” .
https://support.apple.com/en-us/126604
Did this also update it in /System/Library ? My System/Library/…/info.plist shows 20621.3.11.11.3 for “CFBundleVersion” (assuming that’s the right field to check). Is there a separate location for a Safari-bundled WebKit, or does Safari just reference the System/Library one?
Thanks!
Edit: Is there a webpage showing the version history for Webkit bundled in Apple's OSes?