Skip to main content

Apple Safari CVE-2026-65332

| EUVDEUVD-2026-60481 MEDIUM
Improper Check or Handling of Exceptional Conditions (CWE-703)
2026-08-17 apple GHSA-qm7r-2h56-xqm9
Denial Of Service Apple Ios And Ipados Red Hat Suse
4.3
CVSS 3.1 · Vendor: apple
Share

Severity by source

Vendor (apple) PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
vuln.today AI
4.3 MEDIUM

Network delivery requires mandatory user interaction to load malicious content; sole impact is a browser crash with no confidentiality or integrity loss, justifying A:L only.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
8.8 HIGH
qualitative

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

5
Analysis Generated
Aug 18, 2026 - 14:37 vuln.today
CVSS changed
Aug 18, 2026 - 14:22 NVD
4.3 (MEDIUM)
Patch available
Aug 17, 2026 - 22:03 EUVD
CVE Published
Aug 17, 2026 - 21:29 cve.org
MEDIUM 4.3
CVE Published
Aug 17, 2026 - 21:29 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

AnalysisAI

Safari on Apple iOS, iPadOS, and macOS crashes when processing maliciously crafted web content due to a state management deficiency, constituting a network-delivered denial-of-service condition with no data exposure. Affected platforms span iOS and iPadOS below 18.7.10 (legacy branch) and 26.6.1 (iOS 26 branch), and macOS Tahoe below 26.6.2, all now patched by Apple. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires the victim to actively open or load maliciously crafted web content in Safari, confirmed by CVSS UI:R. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 base score of 4.3 Medium accurately characterizes a constrained-impact flaw: network delivery is possible (AV:N, AC:L, PR:N), but user interaction is mandatory (UI:R), the scope is unchanged, and the sole impact is a low-severity application crash (A:L) with no confidentiality or integrity compromise. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Vendor-released patches are available: update iOS and iPadOS to 18.7.10 (legacy branch) or 26.6.1 (iOS 26 branch), and update macOS Tahoe to 26.6.2, all via Apple Software Update or Settings > General > Software Update. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ios And Ipados

View all
CVE-2026-43723 HIGH POC
7.8 Jul 27

Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,
CVE-2026-64771 CRITICAL
9.8 Jul 27

Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause
CVE-2026-43803 CRITICAL
9.8 Jul 27

Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg
CVE-2026-43810 CRITICAL
9.8 Jul 27

Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.
CVE-2026-64770 CRITICAL
9.8 Jul 27

Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
CVE-2026-64769 CRITICAL
9.8 Jul 27

Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a
CVE-2026-64774 CRITICAL
9.8 Jul 27

We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou
CVE-2026-64772 CRITICAL
9.8 Jul 27

Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an
CVE-2026-43807 CRITICAL
9.8 Jul 27

Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS,
CVE-2026-64733 CRITICAL
9.8 Jul 27

A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An at
CVE-2026-43799 CRITICAL
9.8 Jul 27

Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Se
CVE-2026-64700 CRITICAL
9.8 Jul 27

Local denial-of-service in Apple operating systems via a use-after-free vulnerability allows an app to cause unexpected

Same weakness CWE-703 – Improper Check or Handling of Exceptional Conditions

View all
CVE-2019-5031 HIGH POC
8.8
CVE-2019-11245 HIGH POC
7.8
CVE-2025-59531 HIGH POC
7.5
CVE-2025-68135 MEDIUM POC
6.5
CVE-2023-0397 MEDIUM POC
6.5
CVE-2023-51443 MEDIUM POC
5.9
CVE-2023-49786 MEDIUM POC
5.9
CVE-2025-13026 CRITICAL
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Affected
SUSE Linux Enterprise Module for Development Tools 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected

Share

CVE-2026-65332 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy