CVE-2026-65347

The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service...

CVE-2026-65347

CVE-2026-65347 affects the ImageIO framework on iOS and macOS. A crafted image could cause a denial-of-service via improved checks in iOS 26.6.1/iPadOS 26.6.1/macOS Tahoe 26.6.2. CVSS 6.5 (MEDIUM). No exploitation observed. Patch applies to devices running those OS versions.

CVE-2026-43795

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-43795

A WebKit memory-handling flaw (CVE-2026-43795) causes Safari crashes when processing malicious web content. CVSS 4.3 (Medium). Patched in Safari 26.6.1, iOS/iPadOS 18.7.10 & 26.6.1, macOS Tahoe 26.6.2. No known exploitation; CISA assesses partial technical impact.

CVE-2026-43795

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65330

CVE-2026-65330 is a kernel memory-handling flaw in Apple devices; any installed app may trigger system crashes or corrupt kernel memory. Fixed in iOS/iPadOS 26.6.1 and macOS Tahoe 26.6.2. No active exploitation reported. CISA SSVC rates partial technical impact, non-automatable. Update to the pat...

CVE-2026-65330

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-65330

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-65340

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65340

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65340

CVE-2026-65340 is a WebKit state management vulnerability in Apple's Safari browser. Processing maliciously crafted web content may lead to an unexpected Safari crash (denial of service). The issue was addressed through improved state management (WebKit Bugzilla: 316996). Affected products includ...

CVE-2026-65337

WebKit in Safari, iOS/iPadOS, and macOS Tahoe had a state management flaw exploitable by malicious web content, causing an unexpected Safari crash. CVSS 4.3 (Medium) reflects network access with user interaction required and low availability impact. No in-the-wild exploitation is reported. Fixes ...

CVE-2026-65337

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65337

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-64788

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-64788

CVE-2026-64788 affects Apple's IOGPUFamily component on iOS 26.6.1/iPadOS 26.6.1 and macOS Tahoe 26.6.2. The root cause is insufficient memory handling when processing maliciously crafted web content, leading to memory corruption. Reported by f00l, 3ndy1, Minghao Lin, Y1nkoc, and Arjanit Isufi. C...

CVE-2026-64788

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-65336

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65336

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65336

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...