EPSS 0.3%top 76%

A use-after-free issue was addressed with improved memory management. (CVE-2026-64787)

Medium

VulnerabilityCVE-2026-64787gcve osv ubuntu-cve-2026-64787 cve-2026-64787 ubuntu-16-04-lts ubuntu-18-04-lts ubuntu-20-04-lts ubuntu-22-04-lts ubuntu-24-04-lts ubuntu-26-04-lts ghsa-p984-67jc-vc4w ghsa

Published: 08/18/2026 (08/18/2026, 00:30:35 UTC)

Source: GCVE Database

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

CVSS v3.1

Score 6.5medium

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected software

Ubuntu:16.04:LTSmore threats →ghsa

qtwebkit-opensource-src

pkg:deb/ubuntu/qtwebkit-opensource-src?arch=source&distro=xenial

Affected versions

=5.4.2+dfsg-1ubuntu2.1=5.5.1+dfsg-2ubuntu1

Ubuntu:16.04:LTSmore threats →ghsa

webkit2gtk

pkg:deb/ubuntu/webkit2gtk?arch=source&distro=xenial

Affected versions

=2.8.5+dfsg1-3=2.10.3+dfsg1-1=2.10.4+dfsg1-1=2.10.5-1=2.10.6-1=2.10.6-1ubuntu1=2.10.8-1ubuntu1=2.10.9-1ubuntu1=2.12.5-0ubuntu0.16.04.1=2.14.2-0ubuntu0.16.04.1=2.14.3-0ubuntu0.16.04.1=2.14.5-0ubuntu0.16.04.1=2.16.1-0ubuntu0.16.04.1=2.16.1-0ubuntu0.16.04.2=2.16.2-0ubuntu0.16.04.1=2.16.3-0ubuntu0.16.04.1=2.16.6-0ubuntu0.16.04.1=2.18.0-0ubuntu0.16.04.2=2.18.3-0ubuntu0.16.04.1=2.18.4-0ubuntu0.16.04.1=2.18.5-0ubuntu0.16.04.1=2.18.6-0ubuntu0.16.04.1=2.20.1-0ubuntu0.16.04.1=2.20.2-0ubuntu0.16.04.1=2.20.3-0ubuntu0.16.04.1=2.20.5-0ubuntu0.16.04.1

Ubuntu:16.04:LTSmore threats →ghsa

qtwebkit-source

pkg:deb/ubuntu/qtwebkit-source?arch=source&distro=xenial

Affected versions

=2.3.2-0ubuntu10=2.3.2-0ubuntu11

Ubuntu:16.04:LTSmore threats →ghsa

webkitgtk

pkg:deb/ubuntu/webkitgtk?arch=source&distro=xenial

Affected versions

=2.4.9-2ubuntu2=2.4.10-0ubuntu1=2.4.11-0ubuntu0.1

Ubuntu:18.04:LTSmore threats →ghsa

webkit2gtk

pkg:deb/ubuntu/webkit2gtk?arch=source&distro=bionic

Affected versions

=2.18.0-2=2.18.0-2build1=2.18.2-1=2.18.3-1=2.18.4-1=2.18.6-1=2.19.91-1ubuntu1=2.19.92-1=2.20.0-1=2.20.0-2=2.20.0-2ubuntu1=2.20.1-1=2.20.2-0ubuntu0.18.04.1=2.20.3-0ubuntu0.18.04.1=2.20.5-0ubuntu0.18.04.1=2.22.2-0ubuntu0.18.04.1=2.22.2-0ubuntu0.18.04.2=2.22.4-0ubuntu0.18.04.1=2.22.5-0ubuntu0.18.04.1=2.22.6-0ubuntu0.18.04.1=2.24.1-0ubuntu0.18.04.1=2.24.2-0ubuntu0.18.04.1=2.24.4-0ubuntu0.18.04.1=2.26.1-0ubuntu0.18.04.1=2.26.2-0ubuntu0.18.04.1=2.26.3-0ubuntu0.18.04.1=2.26.4-0ubuntu0.18.04.1=2.28.0-0ubuntu0.18.04.3=2.28.1-0ubuntu0.18.04.1=2.28.2-0ubuntu0.18.04.1=2.28.3-0ubuntu0.18.04.1=2.28.4-0ubuntu0.18.04.1=2.30.3-0ubuntu0.18.04.1=2.30.5-0ubuntu0.18.04.1=2.30.6-0ubuntu0.18.04.1=2.32.0-0ubuntu0.18.04.1=2.32.3-0ubuntu0.18.04.1=2.32.4-0ubuntu0.18.04.1

Ubuntu:18.04:LTSmore threats →ghsa

qtwebkit-opensource-src

pkg:deb/ubuntu/qtwebkit-opensource-src?arch=source&distro=bionic

Affected versions

=5.9.1+dfsg-5ubuntu1=5.9.1+dfsg-5ubuntu3=5.212.0~alpha2-5build2=5.212.0~alpha2-5build4=5.212.0~alpha2-7=5.212.0~alpha2-7build2=5.212.0~alpha2-7ubuntu1

Ubuntu:18.04:LTSmore threats →ghsa

qtwebkit-source

pkg:deb/ubuntu/qtwebkit-source?arch=source&distro=bionic

Affected versions

=2.3.2-0ubuntu13

Ubuntu:18.04:LTSmore threats →ghsa

webkitgtk

pkg:deb/ubuntu/webkitgtk?arch=source&distro=bionic

Affected versions

=2.4.11-3=2.4.11-3ubuntu2=2.4.11-3ubuntu3

Ubuntu:20.04:LTSmore threats →ghsa

webkit2gtk

pkg:deb/ubuntu/webkit2gtk?arch=source&distro=focal

Affected versions

=2.26.1-3=2.26.2-1=2.26.3-1ubuntu2=2.26.4-1ubuntu1=2.28.0-1ubuntu2=2.28.1-1=2.28.2-0ubuntu0.20.04.1=2.28.3-0ubuntu0.20.04.1=2.28.4-0ubuntu0.20.04.1=2.30.3-0ubuntu0.20.04.1=2.30.5-0ubuntu0.20.04.1=2.30.6-0ubuntu0.20.04.1=2.32.0-0ubuntu0.20.04.1=2.32.3-0ubuntu0.20.04.1=2.32.4-0ubuntu0.20.04.1=2.34.1-0ubuntu0.20.04.1=2.34.3-0ubuntu0.20.04.1=2.34.4-0ubuntu0.20.04.1=2.34.6-0ubuntu0.20.04.1=2.36.0-0ubuntu0.20.04.3=2.36.2-0ubuntu0.20.04.1=2.36.3-0ubuntu0.20.04.1=2.36.4-0ubuntu0.20.04.1=2.36.6-0ubuntu0.20.04.1=2.36.7-0ubuntu0.20.04.1=2.36.8-0ubuntu0.20.04.1=2.38.2-0ubuntu0.20.04.1=2.38.3-0ubuntu0.20.04.1=2.38.4-0ubuntu0.20.04.2=2.38.5-0ubuntu0.20.04.1=2.38.6-0ubuntu0.20.04.1

Ubuntu:20.04:LTSmore threats →ghsa

qtwebkit-opensource-src

pkg:deb/ubuntu/qtwebkit-opensource-src?arch=source&distro=focal

Affected versions

=5.212.0~alpha3-3=5.212.0~alpha3-5=5.212.0~alpha3-6=5.212.0~alpha3-7=5.212.0~alpha4-1=5.212.0~alpha4-1ubuntu1=5.212.0~alpha4-1ubuntu2=5.212.0~alpha4-1ubuntu2.1

Ubuntu:20.04:LTSmore threats →ghsa

wpewebkit

pkg:deb/ubuntu/wpewebkit?arch=source&distro=focal

Affected versions

=2.26.3-1=2.26.4-1=2.26.4-1build1=2.28.0-1=2.28.1-1

Ubuntu:22.04:LTSmore threats →ghsa

qtwebkit-opensource-src

pkg:deb/ubuntu/qtwebkit-opensource-src?arch=source&distro=jammy

Affected versions

=5.212.0~alpha4-12=5.212.0~alpha4-13=5.212.0~alpha4-14=5.212.0~alpha4-14build1=5.212.0~alpha4-14ubuntu2=5.212.0~alpha4-15ubuntu1

Ubuntu:22.04:LTSmore threats →ghsa

webkit2gtk

pkg:deb/ubuntu/webkit2gtk?arch=source&distro=jammy

Affected versions

=2.34.0-1ubuntu1=2.34.1-1ubuntu1=2.34.2-1ubuntu1=2.34.3-1=2.35.3-1ubuntu1=2.35.90-1ubuntu1=2.36.0-2ubuntu1=2.36.2-0ubuntu0.22.04.1=2.36.3-0ubuntu0.22.04.1=2.36.4-0ubuntu0.22.04.1=2.36.6-0ubuntu0.22.04.1=2.36.7-0ubuntu0.22.04.1=2.36.8-0ubuntu0.22.04.1=2.38.2-0ubuntu0.22.04.2=2.38.3-0ubuntu0.22.04.1=2.38.4-0ubuntu0.22.04.1=2.38.5-0ubuntu0.22.04.1=2.38.6-0ubuntu0.22.04.1=2.40.4-0ubuntu0.22.04.1=2.40.5-0ubuntu0.22.04.1=2.42.1-0ubuntu0.22.04.1=2.42.2-0ubuntu0.22.04.1=2.42.3-0ubuntu0.22.04.1=2.42.4-0ubuntu0.22.04.1=2.42.5-0ubuntu0.22.04.2=2.44.0-0ubuntu0.22.04.1=2.44.2-0ubuntu0.22.04.1=2.44.3-0ubuntu0.22.04.1=2.46.1-0ubuntu0.22.04.3=2.46.3-0ubuntu0.22.04.1=2.46.4-0ubuntu0.22.04.1=2.46.5-0ubuntu0.22.04.1=2.46.6-0ubuntu0.22.04.1=2.48.0-0ubuntu0.22.04.1=2.48.1-0ubuntu0.22.04.1=2.48.3-0ubuntu0.22.04.1=2.48.5-0ubuntu0.22.04.1=2.48.7-0ubuntu0.22.04.2=2.50.1-0ubuntu0.22.04.1=2.50.2-0ubuntu0.22.04.2=2.50.3-0ubuntu0.22.04.1=2.50.4-0ubuntu0.22.04.1

Ubuntu:22.04:LTSmore threats →ghsa

wpewebkit

pkg:deb/ubuntu/wpewebkit?arch=source&distro=jammy

Affected versions

=2.32.4-1=2.34.1-1=2.34.2-1=2.34.3-1=2.34.4-1=2.34.5-1=2.34.6-1=2.36.0-2ubuntu2=2.36.0-2ubuntu3

Ubuntu:24.04:LTSmore threats →ghsa

qtwebkit-opensource-src

pkg:deb/ubuntu/qtwebkit-opensource-src?arch=source&distro=noble

Affected versions

=5.212.0~alpha4-33=5.212.0~alpha4-33build1=5.212.0~alpha4-34=5.212.0~alpha4-34ubuntu3=5.212.0~alpha4-34ubuntu4=5.212.0~alpha4-36

Ubuntu:24.04:LTSmore threats →ghsa

webkit2gtk

pkg:deb/ubuntu/webkit2gtk?arch=source&distro=noble

Affected versions

=2.42.1-2=2.42.2-1=2.42.3-1=2.42.4-1=2.43.3-1=2.43.3-1build2=2.44.0-2=2.44.2-0ubuntu0.24.04.1=2.44.2-0ubuntu0.24.04.2=2.44.3-0ubuntu0.24.04.1=2.46.1-0ubuntu0.24.04.1=2.46.3-0ubuntu0.24.04.1=2.46.4-0ubuntu0.24.04.1=2.46.5-0ubuntu0.24.04.1=2.46.6-0ubuntu0.24.04.1=2.48.0-0ubuntu0.24.04.1=2.48.1-0ubuntu0.24.04.1=2.48.3-0ubuntu0.24.04.1=2.48.5-0ubuntu0.24.04.1=2.48.7-0ubuntu0.24.04.2=2.50.1-0ubuntu0.24.04.1=2.50.2-0ubuntu0.24.04.2=2.50.3-0ubuntu0.24.04.1=2.50.4-0ubuntu0.24.04.1=2.52.3-0ubuntu0.24.04.1

Ubuntu:26.04:LTSmore threats →ghsa

webkit2gtk

pkg:deb/ubuntu/webkit2gtk?arch=source&distro=resolute

Affected versions

=2.48.6-1ubuntu2=2.50.0-2ubuntu1=2.50.1-1ubuntu1=2.50.2-1ubuntu1=2.50.3-1ubuntu1=2.50.4-1ubuntu1=2.51.91-1=2.51.92-1=2.52.0-1=2.52.3-0ubuntu0.26.04.2=2.52.3-0ubuntu0.26.04.3

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

Weaknesses

CWE-416Use After Free

Technical Details

Gcve Source: db.gcve.eu
Osv Id: UBUNTU-CVE-2026-64787
Osv Schema Version: 1.7.0
Ecosystems: ["Ubuntu:16.04:LTS","Ubuntu:18.04:LTS","Ubuntu:20.04:LTS","Ubuntu:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:26.04:LTS"]
Cvss Version: 3.1
State: PUBLISHED

Threat ID: 6a8c4c50acd9273b499be1ee

Added to database: 08/24/2026, 13:51:12 UTC

Last updated: 10/06/2026, 18:48:24 UTC

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by

Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

Please log in to the Console to use AI analysis features.

External Links

NVD Database MITRE CVE Reference 1 Reference 2 Reference 3 Reference 4 Reference 5 Reference 6 Reference 7 Reference 8 Reference 9 Reference 10 Reference 11 Search on Google

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited

View courses

A use-after-free issue was addressed with improved memory management. (CVE-2026-64787)

Description

CVSS v3.1

Affected software

Weaknesses

Technical Details

Community Reviews

Related Threats

CVE-2026-84897: CWE-372 Incomplete Internal State Distinction in wolfSSL Inc. wolfSSH

CVE-2026-83742: CWE-191 Integer Underflow (Wrap or Wraparound) in wolfSSL Inc. wolfSSH

CVE-2026-81535: CWE-862 Missing Authorization in wolfSSL Inc. wolfSSH

CVE-2026-106061: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10

CVE-2026-97671: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in IBM Langflow OSS

Actions

External Links

Need more coverage?

Latest Threats

Check if your credentials are on the dark web

Lead Pen Test Professional