CVE-2026-65331

CVE-2026-65331 is a WebKit state management vulnerability in Apple's Safari browser. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed through improved state management (WebKit Bugzilla 317611), reported by OpenAI Codex ...

CVE-2026-65331

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64760

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state...

CVE-2026-64760

An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state...

CVE-2026-64760

CVE-2026-64760 is an information leakage vulnerability in iOS and iPadOS where a malicious app may be able to leak sensitive kernel state . The issue was addressed with additional validation , indicating insufficient input validation as the underlying cause. It is fixed in iOS 18.7.10 and iPadOS ...

CVE-2026-43794

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-43794

The vulnerability resides in WebKit on Apple platforms, triggered by processing malicious web content. It is fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 . No exploitation or exploit code is reported; CISA SSVC rates technical impact as total. Users shou...

CVE-2026-43794

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-65346

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution...

CVE-2026-65346

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution...

CVE-2026-65346

An integer overflow in Apple's ImageIO framework (CVE-2026-65346) allows arbitrary code execution when processing a malicious image on iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. No in-the-wild exploitation is reported; updates are available via Apple's security advisories.

CVE-2026-65351

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65351

This issue was addressed through improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65351

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65351

CVE-2026-65351 is a WebKit state management flaw in Apple's browser engine; processing malicious web content can crash Safari. It is fixed in Safari 26.6.1, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2. No exploitation reported; CISA assesses technical impact as partial. Users should apply the relev...

CVE-2026-64782

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64782

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64782

The vulnerability resides in the WebKit component of Apple platforms. A memory corruption issue was addressed with improved locking. Processing maliciously crafted web content may cause an unexpected Safari crash. Fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26...

CVE-2026-64782

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65347

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service...