Threat database

A vulnerability in Apple Safari allows processing of maliciously crafted web content to cause an unexpected crash. This issue affects multiple Apple platforms and has been addressed through improved state management. Fixed versions include Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27. The vulnerability has a medium severity with a CVSS score of 4.3 and does not impact confidentiality or integrity but affects availability by causing crashes.

CVE-2026-64760 is an information leakage vulnerability in Apple iOS and iPadOS that could allow an app with limited privileges to leak sensitive kernel state information. The issue affects versions prior to iOS and iPadOS 18.7.10 and was addressed by additional validation in the fixed versions. The vulnerability has a medium severity rating with a CVSS score of 5.5. Apple released fixes in iOS 18.7.10, iPadOS 18.7.10, and related Apple operating systems.

A vulnerability in Apple Safari allows processing of maliciously crafted web content to cause an unexpected browser crash. This issue affects multiple Apple platforms including Safari on macOS, iOS, iPadOS, and visionOS. The flaw was addressed through improved state management and fixed in Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27.

A denial-of-service vulnerability exists in Apple iOS and iPadOS when processing an image. The issue allows an attacker to cause a denial-of-service condition. This vulnerability is addressed with improved checks and fixed in iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27.

CVE-2026-43795 is a medium severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected browser crash. The issue is related to improper memory handling and affects multiple Apple platforms including Safari on iOS, iPadOS, macOS Tahoe, and visionOS. The vulnerability has been addressed with improved memory handling in Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27.

A vulnerability in Apple iOS and iPadOS allows an app to cause unexpected system termination or corrupt kernel memory. This issue affects multiple Apple operating systems and was addressed with improved memory handling. Fixed versions include iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27.

CVE-2026-65340 is a medium severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected browser crash. The issue was addressed through improved state management and fixed in Safari 26.6.1 and corresponding OS versions including iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27. No confidentiality or integrity impact is indicated, only availability is affected.

A vulnerability in Apple Safari allows processing of maliciously crafted web content to cause an unexpected browser crash. This issue affects multiple Apple platforms including Safari on iOS, iPadOS, macOS Tahoe, and visionOS. The flaw was addressed through improved state management and fixed in Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27. The vulnerability has a medium severity rating with a CVSS score of 4.3 and does not impact confidentiality or integrity but can cause denial of service by crashing the browser. No known exploits are reported in the wild at this time.

A memory corruption vulnerability exists in Apple iOS and iPadOS when processing maliciously crafted web content. This issue was addressed with improved memory handling and fixed in iOS 26.6.1 and iPadOS 26.6.1. The vulnerability has a CVSS score of 5.4, indicating medium severity. Exploitation requires user interaction and network access but no privileges. No known exploits are reported in the wild.

A vulnerability in Apple Safari allows processing of maliciously crafted web content to cause an unexpected browser crash. This issue affects multiple Apple platforms including Safari on iOS, iPadOS, macOS, and visionOS. The flaw was addressed through improved state management and fixed in Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27. The vulnerability has a medium severity rating with a CVSS score of 4.3 and does not impact confidentiality or integrity but affects availability by causing crashes.

CVE-2026-64784 is an out-of-bounds access vulnerability in Apple Safari that could cause the browser to crash when processing maliciously crafted web content. The issue was addressed by improved bounds checking and fixed in Safari 26.6.1 and corresponding versions of iOS, iPadOS, macOS Tahoe, and visionOS. The vulnerability has a medium severity rating with a CVSS score of 4.3 and does not impact confidentiality or integrity but affects availability by causing crashes.

A memory corruption vulnerability exists in Apple Safari that can be triggered by processing maliciously crafted web content. This issue has been addressed with improved memory handling and fixed in Safari 26.6.1 and corresponding versions of iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. The vulnerability has a medium severity rating with a CVSS score of 5.4. No known exploits are currently reported in the wild.

CVE-2026-28984 is a medium severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected browser crash. The issue was addressed by Apple with improved memory handling and fixed in Safari 26.5 and corresponding OS versions including iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.

CVE-2026-64787 is a use-after-free vulnerability in Apple Safari that could cause an unexpected process termination when processing maliciously crafted web content. The issue has been addressed with improved memory management and fixed in Safari 26.6.1 and corresponding OS versions including iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. The vulnerability has a medium severity rating with a CVSS score of 6.5 and does not impact confidentiality or integrity but affects availability.

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.

CVE-2026-65335 is a medium severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected browser crash. The issue was addressed through improved state management and fixed in Safari 26.6.1 and corresponding OS versions including iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27.

A vulnerability in Apple Safari allows processing of maliciously crafted web content to cause an unexpected browser crash. This issue is related to memory handling and affects multiple Apple platforms including Safari on iOS, iPadOS, macOS Tahoe, and visionOS. The flaw has been addressed in Safari 26.6.1 and corresponding OS versions. The CVSS score is 4.3, indicating a medium severity impact primarily causing denial of service through application crash without data confidentiality or integrity loss.

CVE-2026-65333 is a medium severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected browser crash. The issue is related to improper state management and affects multiple Apple platforms including Safari on iOS, iPadOS, macOS, and visionOS. The vulnerability has been fixed in Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, macOS Tahoe 26.6.2, and visionOS 27.

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Visiting a maliciously crafted website may leak sensitive data.

CVE-2026-43667 is a denial-of-service vulnerability affecting Apple iOS and iPadOS. The issue involves a reachable assertion that could be triggered by an attacker in a privileged network position, causing the affected device to become unavailable. Apple addressed this vulnerability with improved input validation in iOS and iPadOS versions 18.7.10 and 26.5, among other platforms. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.