CVE-2026-65336

CVE-2026-65336 is a state management flaw in WebKit , the web engine used by Safari and other Apple products. Processing maliciously crafted web content can trigger an unexpected Safari crash , resulting in a denial-of-service condition. The issue was identified by Josef Korbel (WebKit Bugzilla 3...

CVE-2026-64784

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64784

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64784

A WebKit out-of-bounds access flaw, credited to Janggoon Lee and Amy Burnett, affects Safari on iOS/iPadOS 18.7.10, iOS/iPadOS 26.6.1, and macOS Tahoe 26.6.2; visiting malicious web content may crash Safari. CVSS 3.1 base score 4.3 (MEDIUM). No public exploit details provided.

CVE-2026-65341

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-65341

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-65341

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-65341

CVE-2026-65341 affects WebKit in Safari 26.6.1, iOS 18.7.10/iPadOS 18.7.10, iOS 26.6.1/iPadOS 26.6.1, and macOS Tahoe 26.6.2. The flaw stems from improper memory handling; processing maliciously crafted web content can trigger memory corruption. CVSS 3.1 scores 5.4 (MEDIUM), network exploitable w...

CVE-2026-28984

Apple addressed a memory-handling flaw in Safari's WebKit engine on iOS/iPadOS 18.7.10. Malicious web content could crash Safari (availability impact only, CVSS 4.3). CISA SSVC rates exploitation as none; update to iOS/iPadOS 18.7.10 to remediate. No in-the-wild exploitation reported.

CVE-2026-28984

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-28984

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-28984

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64787

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination...

CVE-2026-64787

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination...

CVE-2026-64787

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination...

CVE-2026-64787

CVE-2026-64787 is a use-after-free vulnerability in WebKit (Bugzilla 313703), addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination . The issue is fixed in Safari 26.6.1 , iOS 26.6.1 , iPadOS 26.6.1 , and macOS Tahoe 26...

CVE-2026-64787

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination...

CVE-2026-65339

CVE-2026-65339 is a logic issue in the Audio component of Apple's operating systems, allowing a local app to leak sensitive user information . The vulnerability requires low privileges and user interaction, with a CVSS 3.1 score of 5.0 (MEDIUM) — high confidentiality impact but no integrity or av...

CVE-2026-65339

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...

CVE-2026-65339

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information...