---
id: os_default_browser_modification_disable
title: Disable Modifying the Default Web Browser Application
discussion: |
  The ability to modify the default web browser application _MUST_ be disabled to prevent unauthorized changes to the device's behavior.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95451-1
      ios_18:
        - CCE-94571-7
      visionos_27:
        - CCE-XXXXX-X
      visionos_26:
        - CCE-95569-0
    800-53r5:
      - CM-7
      - CM-7(1)
      - CM-6
  disa:
    cmmc:
      - AU.L2-3.3.3
      - CM.L2-3.4.1
      - CM.L2-3.4.2
      - CM.L2-3.4.6
      - CM.L2-3.4.7
platforms:
  iOS:
    '27.0': {}
    '26.0':
      supervised: true
    '18.0':
      supervised: true
    introduced: '18.2'
  visionOS:
    '27.0': {}
    '26.0':
      supervised: true
    introduced: n/a
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - cmmc_lvl2
  - cmmc_lvl3
  - cnssi-1253_moderate
  - cnssi-1253_low
  - cnssi-1253_high
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - allowDefaultBrowserModification: false
