Threats Tagged 'cve-2026-28947'

UBUNTU-CVE-2026-28947

Apple has addressed multiple vulnerabilities in its iOS and iPadOS operating systems as reported by the Nationaal Cyber Security Centrum. The advisory covers a broad range of security weaknesses including memory safety errors, improper access control, and information exposure. No specific affected versions or detailed technical exploit information are provided. There is no indication of known exploits in the wild at this time.

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVE-2026-28847 is a high-severity vulnerability in Apple Safari where processing maliciously crafted web content may cause an unexpected process crash. The issue is related to improper memory handling and affects multiple Apple platforms including Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. The vulnerability has been addressed with improved memory handling and fixed in Safari 26.5 and corresponding OS versions 18.7.9 and 26.5. Red Hat has also issued security updates for webkitgtk4 in Red Hat Enterprise Linux 7 Extended Lifecycle Support to address this and related vulnerabilities. The CVSS score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.