Skip to main content

WebKit EUVDEUVD-2026-29229

| CVE-2026-28904 HIGH
Buffer Overflow (CWE-119)
2026-05-11 apple GHSA-x38g-jvpg-6w2f
Apple Buffer Overflow Ios And Ipados Tvos Visionos Watchos
7.5
CVSS 3.1 · Vendor: apple
Share

Severity by source

Vendor (apple) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
SUSE
HIGH
qualitative
Red Hat
8.8 HIGH
qualitative

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

5
Analysis Generated
May 12, 2026 - 14:23 vuln.today
CVSS changed
May 12, 2026 - 14:22 NVD
7.5 (HIGH)
Patch available
May 11, 2026 - 22:03 EUVD
CVE Published
May 11, 2026 - 20:07 nvd
UNKNOWN (no severity yet)
CVE Published
May 11, 2026 - 20:07 nvd
HIGH 7.5

DescriptionCVE.org

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

AnalysisAI

Memory corruption in WebKit across Apple's ecosystem enables confidentiality breach via malicious web content without user interaction. Affects iOS/iPadOS versions prior to 18.7.9 and 26.5, macOS Tahoe prior to 26.5, and all Apple operating systems (tvOS, visionOS, watchOS) prior to 26.5. Despite CVSS 7.5 (High), the EPSS score of 0.03% (10th percentile) indicates minimal real-world exploitation likelihood at time of analysis. No active exploitation confirmed (not in CISA KEV), and no public exploit code identified. Apple has released patches across all affected platforms.

Technical ContextAI

This vulnerability stems from a buffer overflow (CWE-119) in WebKit, Apple's browser engine used across iOS, macOS, tvOS, visionOS, and watchOS. Buffer overflows occur when memory write operations exceed allocated buffer boundaries, potentially corrupting adjacent memory regions. The description indicates improved memory handling addressed the flaw, suggesting the original implementation lacked proper bounds checking during web content parsing or rendering. WebKit processes HTML, CSS, JavaScript, and media content, making it a critical attack surface for web-based exploits. The CPE strings identify this as affecting Apple's core operating system components rather than standalone applications, indicating the vulnerability exists in system-level WebKit frameworks shared across Safari and in-app web views.

RemediationAI

Update to patched versions immediately: iOS and iPadOS 18.7.9 or 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Apple's security updates are available through standard system update mechanisms (Settings > General > Software Update on iOS/iPadOS, System Settings > General > Software Update on macOS). Full advisory details are available at https://support.apple.com/en-us/127110, https://support.apple.com/en-us/127111, https://support.apple.com/en-us/127115, https://support.apple.com/en-us/127118, https://support.apple.com/en-us/127119, and https://support.apple.com/en-us/127120. If immediate patching is not feasible, organizations can implement network-level content filtering to block access to untrusted websites, though this significantly impacts user functionality and does not protect against malicious content in trusted contexts like email HTML rendering or in-app web views. Safari's Lockdown Mode (available on iOS 16+, macOS Ventura+) provides additional hardening by disabling JIT compilation and other attack surfaces, but severely restricts web functionality and is only practical for high-risk users. No effective workaround exists that maintains normal web browsing capability.

More in Ios And Ipados

View all
CVE-2026-39868 CRITICAL
9.1 Jun 29

Kernel memory corruption in Apple iOS/iPadOS (before 26.5.2) and macOS Tahoe (before 26.5.2) allows a malicious or compr
CVE-2026-43715 HIGH
8.8 Jun 29

Memory corruption in Apple's WebKit browser engine (Safari and the system WebView on iOS, iPadOS, and macOS before 26.5.
CVE-2026-43705 HIGH
8.8 Jun 29

Memory corruption via type confusion in Apple's WebKit browser engine allows attackers to corrupt memory by luring a vic
CVE-2026-43731 HIGH
8.8 Jun 29

Memory corruption via use-after-free in Apple's WebKit browser engine allows remote attackers to corrupt memory when a v
CVE-2026-28847 HIGH
8.8 May 11

Memory-corruption crash in Apple's WebKit web-content engine lets a malicious website terminate the content-rendering pr
CVE-2026-28955 HIGH
8.8 May 11

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and
CVE-2026-28947 HIGH
8.8 May 11

Use-after-free in WebKit allows remote attackers to trigger Safari crashes and potentially achieve arbitrary code execut
CVE-2026-43735 HIGH
8.1 Jun 29

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS

CVE-2026-28907 HIGH
8.1 May 11

Content Security Policy bypass in Apple's WebKit-based platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) all
CVE-2026-43724 HIGH
7.8 Jun 29

Local privilege escalation and kernel memory corruption in Apple iOS, iPadOS (before 26.5.2) and macOS Tahoe (before 26.
CVE-2026-28953 HIGH
7.5 May 11

Information disclosure in Apple WebKit's web content processing engine allows remote attackers to read sensitive memory

CVE-2026-28943 HIGH
7.5 May 11

Kernel memory layout disclosure in Apple iOS, iPadOS, macOS, tvOS, and watchOS allows a malicious application to read se

Same weakness CWE-119 – Buffer Overflow

View all
CVE-2017-11882 HIGH POC
7.8
CVE-2014-6332 HIGH POC
8.8
CVE-2023-4966 CRITICAL POC
9.4
CVE-2015-2426 HIGH POC
8.8
CVE-2013-3918 HIGH POC
8.8
CVE-2017-11774 HIGH POC
7.8
CVE-2013-3660 HIGH POC
7.8
CVE-2017-6736 HIGH POC
8.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2017-11882 HIGH POC
7.8
CVE-2010-3333 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: High
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed
SUSE Linux Enterprise Module for Basesystem 15 SP7 Fixed
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Fixed
SUSE Linux Enterprise Module for Development Tools 15 SP7 Fixed

Share

EUVD-2026-29229 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy