CVE-2026-28904: Processing maliciously crafted web content may lead to an unexpected process crash in Apple Safari
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
AI Analysis
Technical Summary
CVE-2026-28904 is a vulnerability in Apple Safari and WebKitGTK+ where processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling. This vulnerability is classified under CWE-119 and CWE-120, which relate to memory safety errors such as buffer overflows. The issue has been fixed in Safari version 26.5 and corresponding OS versions (iOS 18.7.9, iPadOS 18.7.9, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). Red Hat has issued security advisories and patches for WebKitGTK+ packages on Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this vulnerability. The CVSS v3.1 base score is 7.5 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, high confidentiality impact, no integrity or availability impact. There are no known exploits in the wild. Patch status is confirmed fixed in the specified Safari and OS versions and in updated WebKitGTK+ packages from Red Hat.
Potential Impact
Successful exploitation of this vulnerability may cause an unexpected process crash in Safari or WebKitGTK+ when processing malicious web content. This can lead to denial of service for the affected process. The CVSS score indicates a high confidentiality impact, suggesting potential exposure of sensitive information during the crash or memory handling issues. There is no reported impact on integrity or availability beyond the process crash. No known exploits have been observed in the wild.
Mitigation Recommendations
A fix is available and has been released by Apple in Safari 26.5 and corresponding OS updates (iOS 18.7.9, iPadOS 18.7.9, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). Red Hat has also provided updated WebKitGTK+ packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this issue. Users and administrators should apply these official patches promptly to mitigate the vulnerability. Patch status is confirmed fixed in these versions. No additional mitigation actions are indicated by the vendor advisories.
CVE-2026-28904: Processing maliciously crafted web content may lead to an unexpected process crash in Apple Safari
Description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS v3.1
Score 7.5high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-28904 is a vulnerability in Apple Safari and WebKitGTK+ where processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling. This vulnerability is classified under CWE-119 and CWE-120, which relate to memory safety errors such as buffer overflows. The issue has been fixed in Safari version 26.5 and corresponding OS versions (iOS 18.7.9, iPadOS 18.7.9, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). Red Hat has issued security advisories and patches for WebKitGTK+ packages on Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this vulnerability. The CVSS v3.1 base score is 7.5 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, high confidentiality impact, no integrity or availability impact. There are no known exploits in the wild. Patch status is confirmed fixed in the specified Safari and OS versions and in updated WebKitGTK+ packages from Red Hat.
Potential Impact
Successful exploitation of this vulnerability may cause an unexpected process crash in Safari or WebKitGTK+ when processing malicious web content. This can lead to denial of service for the affected process. The CVSS score indicates a high confidentiality impact, suggesting potential exposure of sensitive information during the crash or memory handling issues. There is no reported impact on integrity or availability beyond the process crash. No known exploits have been observed in the wild.
Mitigation Recommendations
A fix is available and has been released by Apple in Safari 26.5 and corresponding OS updates (iOS 18.7.9, iPadOS 18.7.9, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5). Red Hat has also provided updated WebKitGTK+ packages for Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this issue. Users and administrators should apply these official patches promptly to mitigate the vulnerability. Patch status is confirmed fixed in these versions. No additional mitigation actions are indicated by the vendor advisories.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apple
- Date Reserved
- 2026-03-03T16:36:03.984Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-28904","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:27728","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:25918","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:27785","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:28114","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:27804","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:28148","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:28146","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:28147","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:25927","vendor":"Red Hat"}]
Threat ID: 6a02874fcbff5d86108b5629
Added to database: 05/12/2026, 01:50:07 UTC
Last enriched: 07/15/2026, 08:47:50 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 74
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.