Apple Safari
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Apple Safari.
Recent Apple Safari Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 149527 | Safari 27.2 - Apple Security Content | October 26, 2026 |
| 149039 | Safari 27 - Apple Security Content | September 14, 2026 |
| 148286 | Safari 26.6.1 - Apple Security Content | August 18, 2026 |
| 128073 | Safari 26.6 - Apple Security Content | July 27, 2026 |
| 127685 | Safari 26.5.2 - Apple Security Content | June 29, 2026 |
| 127121 | Safari 26.5 - Apple Security Content | May 13, 2026 |
| 126800 | Safari 26.4 - Apple Security Content | March 24, 2026 |
| 126354 | Safari 26.3 - Apple Security Content | February 11, 2026 |
| 125892 | Safari 26.2 - Apple Security Content | December 12, 2025 |
| 125640 | Safari 26.1 - Apple Security Content | November 3, 2025 |
Known Exploited Apple Safari Vulnerabilities
The following Apple Safari vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| Apple Safari Webkit Browser Engine Buffer Overflow Vulnerability |
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-30665 Exploit Probability: 3.7% |
November 3, 2021 |
| Apple Safari Webkit Browser Engine Integer Overflow Vulnerability |
Integer overflow. Processing maliciously crafted web content may lead to arbitrary code execution. CVE-2021-30663 Exploit Probability: 3.5% |
November 3, 2021 |
By the Year
In 2026 there have been 146 vulnerabilities in Apple Safari with an average score of 6.6 out of ten. Last year, in 2025 Safari had 102 security vulnerabilities published. That is, 44 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.16
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 146 | 6.61 |
| 2025 | 102 | 6.78 |
| 2024 | 61 | 6.69 |
| 2023 | 44 | 7.92 |
| 2022 | 42 | 7.84 |
| 2021 | 35 | 7.75 |
| 2020 | 74 | 7.15 |
| 2019 | 166 | 8.02 |
| 2018 | 41 | 8.11 |
It may take a day or so for new Safari vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apple Safari Security Vulnerabilities
Apple Safari/WebKit Use-After-Free before 27.2
CVE-2026-113904
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple Safari type confusion (pre-27.2) leading to memory corruption
CVE-2026-113949
8.8 - High
- October 26, 2026
A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Object Type Confusion
Apple Safari <27.2 OOB Write in Image Processing
CVE-2026-112621
7.5 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing a maliciously crafted image may result in memory corruption.
Memory Corruption
Safari < 27.2 OOB Read Vulnerability
CVE-2026-112699
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may result in the disclosure of process memory.
Out-of-bounds Read
Apple Safari iOS UAF: Arbitrary Code Execution, Fixed in 27.2
CVE-2026-112637
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple Safari UAF Crash before 27.2
CVE-2026-86986
7.5 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Dangling pointer
Apple Safari <27.2 Use-After-Free in WebKit
CVE-2026-112695
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple Safari media format restriction bypass (Lockdown Mode) before 27.2
CVE-2026-113952
5.4 - Medium
- October 26, 2026
A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode.
Protection Mechanism Failure
Apple Safari 27.2 Use-After-Free Memory Corruption (WebKit)
CVE-2026-112640
7.6 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Dangling pointer
Apple WebKit OOB Read in Safari/OS 2627 Causes Crashes
CVE-2026-86973
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Out-of-bounds Read
AOFU in Apple Safari/OS 27.2: Improper MemMgmt Causing Code Exec
CVE-2026-112626
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple Safari Use-After-Free RCE (pre-27.2)
CVE-2026-112651
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Type confusion memory corruption in Safari <=27.1
CVE-2026-86974
7.5 - High
- October 26, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Object Type Confusion
Apple Safari Web Content Crash (fixed in 27.2)
CVE-2026-112684
4.3 - Medium
- October 26, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Improper Check or Handling of Exceptional Conditions
Apple Safari Use-After-Free Crash (before 27.2)
CVE-2026-112693
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Dangling pointer
Apple Safari <27.2 Use-After-Free in WebKit
CVE-2026-113903
6.5 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to unexpected memory modification.
Dangling pointer
Apple Safari/WebKit Use-After-Free before 27.2
CVE-2026-112666
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple Safari 27.2 Type Confusion Leads to Process Termination
CVE-2026-112673
4.3 - Medium
- October 26, 2026
A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Object Type Confusion
Apple Safari Use-After-Free (fixed in 27.2)
CVE-2026-112599
6.5 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple Safari 27.2 Race Condition in Web Rendering
CVE-2026-112686
3.1 - Low
- October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Race Condition
Apple Safari race condition fixed in 27.2 leading to crash
CVE-2026-112669
6.5 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Race Condition
Apple Safari use-after-free before 27.2 (iOS, macOS, visionOS)
CVE-2026-112653
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple Safari use-after-free before 27.2
CVE-2026-113901
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
Apple Safari OOB read before 27.2 (WebKit)
CVE-2026-112680
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may result in the disclosure of process memory.
Out-of-bounds Read
Apple Safari/WebKit Use-After-Free UAF in 27.2 (iOS/macOS) leads to RCE
CVE-2026-112655
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple Safari: Crash via malformed web content in 27.2
CVE-2026-86985
6.5 - Medium
- October 26, 2026
This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Improper Input Validation
Apple Safari/WebKit Type Confusion RCE (pre27.2)
CVE-2026-112659
8.8 - High
- October 26, 2026
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Object Type Confusion
Apple Safari/WebKit use-after-free before 27.2 leads to RCE
CVE-2026-112623
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Safari <27.2 Use-After-Free in WebKit (Apple)
CVE-2026-112654
7.5 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple Safari 27.2 UA-FREE Crash via Malicious Web Content
CVE-2026-112615
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Dangling pointer
Apple Safari, iOS & macOS: UseAfterFree Causing A/C Exec (Before 27.2)
CVE-2026-112639
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple Safari iOS/macOS UAF flaw fixed in 27.2
CVE-2026-112697
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple Safari <27.2 Web Content sandbox escape
CVE-2026-113897
10 - Critical
- October 26, 2026
This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.
Protection Mechanism Failure
Safari Type Confusion Vulnerability Arbitrary Code Execution
CVE-2026-86922
8.8 - High
- October 20, 2026
A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.
Object Type Confusion
Logic Flaw in Safari Web Rendering Allows Unexpected Behavior
CVE-2026-86872
5.4 - Medium
- October 20, 2026
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.
Object Type Confusion
Apple Safari 27: Exfiltration of installed apps via state management
CVE-2026-84518
4.3 - Medium
- September 14, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.
External Control of Critical State Data
Safari Webarchive XSS via Malformed File
CVE-2026-86898
5.4 - Medium
- September 14, 2026
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
XSS
Apple OS & Browser Crash via State Mgmt Logic Issue
CVE-2026-84635
6.5 - Medium
- September 14, 2026
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.
Object Type Confusion
Safari Permissions Issue May Leak Sensitive Data
CVE-2026-64753
6.5 - Medium
- September 14, 2026
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.
Improper Privilege Management
Safari 27 Entitlement Check Bypass Enables App Sensitive Data Access
CVE-2026-86897
5.5 - Medium
- September 14, 2026
This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.
AuthZ
Safari Web Content OOB Write Vulnerability Fixed in 26.6.1
CVE-2026-65391
8.8 - High
- September 14, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
Integer Overflow or Wraparound
Safari integer overflow via web content (pre-26.6.1)
CVE-2026-65390
8.8 - High
- September 14, 2026
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
Integer Overflow or Wraparound
Safari CSP Bypass in AudioWorklet (<26.5)
CVE-2026-43670
8.8 - High
- August 25, 2026
A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.
Protection Mechanism Failure
Safari Crash from Malicious Web Content: iOS/iPadOS 18.7.10, 26.6.1; macOS Tahoe 26.6.2
CVE-2026-65331
4.3 - Medium
- August 17, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Improper Check or Handling of Exceptional Conditions
Apple iOS memory corruption fixed 18.7.10
CVE-2026-43794
8.8 - High
- August 17, 2026
A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
Buffer Overflow
Safari StateManagement Flaw Causing Unexpected Crash Before iOS 26.6.1
CVE-2026-65351
4.3 - Medium
- August 17, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Improper Check or Handling of Exceptional Conditions
Safari memory corruption CVE-2026-64782 fixed in iOS 18.7.10
CVE-2026-64782
3.1 - Low
- August 17, 2026
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Race Condition
Apple Safari Crash via Malformed Web Content (Fixed v 18.7.10/26.6.2)
CVE-2026-43795
4.3 - Medium
- August 17, 2026
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Buffer Overflow
Safari Crash via Malicious Web Content (Fixed in iOS 18.7.10 & macOS 26.6.2)
CVE-2026-65340
4.3 - Medium
- August 17, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Improper Input Validation
Safari Crash via Malicious Web Content iOS 18.7.10
CVE-2026-65337
4.3 - Medium
- August 17, 2026
This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Improper Input Validation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Apple Safari or by Apple? Click the Watch button to subscribe.
