This vulnerability in Apple Safari involves improper memory handling when processing specially crafted web content, which can lead to an unexpected process crash. The issue is categorized as a memory safety error (CWE-119). Apple fixed the vulnerability in Safari 26.5 and related OS updates (iOS, iPadOS, macOS Tahoe, tvOS, watchOS 26.5). The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and a high confidentiality impact but no integrity or availability impact.

Successful exploitation can cause Safari to crash unexpectedly, potentially leading to denial of service for the user. The confidentiality impact is rated high, suggesting that sensitive information could be exposed during exploitation. There is no impact on integrity or availability beyond the process crash. No known exploits are currently reported in the wild.

A fix is available and has been implemented by Apple in Safari 26.5 and the corresponding OS updates (iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5). Users and administrators should update to these versions to remediate the vulnerability. Patch status is confirmed by the vendor advisory stating the issue is fixed in these releases.