CVE-2026-28901

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28847

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-42352

pygeoapi is a Python server implementation of the OGC API suite of standards. From version 0.23.0 to before version 0.23.3, OGC API process execution requests can use the subscriber object to requests to internal HTTP services. This issue has been patched in version 0.23.3...

CVE-2026-39869

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing an audio stream in a maliciously crafted media file...

CVE-2026-28917

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-39869

CVE-2026-39869 is a memory-handling vulnerability in processing an audio stream from a maliciously crafted media file. The issue may cause application or process termination due to memory handling problems. Apple indicates fixes in macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Sequoia 15.7.7, tvOS...

CVE-2026-28917

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28917

CVE-2026-28917 affects Apple's platforms (iOS/iPadOS, macOS Tahoe, tvOS, visionOS, watchOS). The issue is resolved by improved input validation and is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Vulnerability class...

CVE-2026-28901

This CVE (CVE-2026-28901) is tied to Apple platforms and affects memory handling in the processing of web content, causing an unexpected process crash. According to connected advisories, Apple has addressed this with updates across multiple OS lines (iOS/iPadOS, macOS Tahoe, tvOS, visionOS, watch...

CVE-2026-28905

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28913

Apple fixed CVE-2026-28913 across iOS/iPadOS/macOS/tvOS/watchOS by addressing a memory handling flaw that could be triggered by processing malicious web content, potentially causing an unexpected process crash. Updates are available in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watch...

CVE-2026-43661

CVE-2026-43661 affects Apple platforms including iOS 26.5/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5. Description: Processing a maliciously crafted image may cause memory corruption due to a buffer overflow in ImageIO; impact is memory corruption with potential for crashes. The vu...

CVE-2026-28913

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28913

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28944

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28944

CVE-2026-28944 relates to memory-management flaws exposed by processing malicious web content, causing an unexpected process crash. It affects Apple platforms including iOS, iPadOS, macOS Tahoe, and visionOS, and is fixed in versions 26.5 for these systems (per the CVE description and linked advi...

CVE-2026-28944

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28883

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2026-28883

CVE-2026-28883 affects Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) prior to 26.5. A use-after-free issue in processing web content led to an unexpected process crash. The root cause is described as memory management flaws addressed by the vendor’s update to version 26.5 ac...

CVE-2026-28883

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash...