Apple Safari EUVD-2026-40205

| CVE-2026-43727 MEDIUM

Use After Free (CWE-416)

2026-06-29 apple

GHSA-7gjf-r94h-p24f

Denial Of Service Use After Free Memory Corruption Apple Ios And Ipados

6.5

CVSS 3.1 · Vendor: apple

Share

Severity by source

Vendor (apple) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

vuln.today AI

6.5 MEDIUM

Network-reachable via web page visit with no privileges required; user must actively browse to content; impact is crash only, with no confidentiality or integrity compromise confirmed.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Red Hat

6.5 MEDIUM

qualitative

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

5

Analysis Generated

Jun 29, 2026 - 22:38 vuln.today

CVSS changed

Jun 29, 2026 - 22:22 NVD

6.5 (MEDIUM)

Patch available

Jun 29, 2026 - 22:02 EUVD

CVE Published

Jun 29, 2026 - 19:43 cve.org

UNKNOWN (no severity yet)

CVE Published

Jun 29, 2026 - 19:43 cve.org

MEDIUM 6.5

DescriptionCVE.org

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

AnalysisAI

Use-after-free in Safari's web content processing engine causes denial of service across Apple platforms, affecting Safari, iOS/iPadOS, and macOS prior to the 26.5.2 release line. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms remote, unauthenticated triggering requiring only that a user visit attacker-controlled web content, with impact limited to availability - specifically an unexpected Safari crash. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at time of analysis.

Technical ContextAI

CWE-416 (Use After Free) describes a class of memory corruption flaw where heap-allocated memory is freed and then subsequently dereferenced, producing undefined behavior - most commonly a crash, but potentially exploitable for code execution in complex browser engine contexts. The affected surface is WebKit, Apple's proprietary browser rendering engine that underpins Safari on all platforms. Because iOS and iPadOS mandate WebKit for all browser rendering (including third-party browsers), the affected CPEs - cpe:2.3:a:apple:safari, cpe:2.3:a:apple:ios_and_ipados, and cpe:2.3:a:apple:macos - collectively represent all Safari users on Apple hardware. The vulnerability resides in the processing of 'maliciously crafted web content,' consistent with a parser, DOM, JavaScript engine, or media subsystem bug within WebKit's content pipeline.

RemediationAI

The primary fix is to apply the vendor-released patches: upgrade to Safari 26.5.2, iOS and iPadOS 26.5.2, or macOS Tahoe 26.5.2, as documented in Apple's security advisories at https://support.apple.com/en-us/127594 (macOS), https://support.apple.com/en-us/127595 (Safari), and https://support.apple.com/en-us/127685 (iOS/iPadOS). On iOS and iPadOS, update via Settings > General > Software Update; on macOS, use System Settings > General > Software Update; Safari on macOS updates alongside the OS or via App Store. As a compensating control prior to patching, organizations can restrict end-user access to untrusted or unknown web content through web filtering appliances or DNS-based blocking, reducing exposure to attacker-hosted pages - note this does not protect against compromised legitimate sites. Disabling JavaScript in Safari (Settings > Safari > Advanced > JavaScript) would reduce attack surface at the cost of broad site compatibility. There are no known workarounds that fully mitigate a WebKit use-after-free without patching.

More in Ios And Ipados

View all

CVE-2026-43723 HIGH This Week POC

Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,

CVE-2026-65414 CRITICAL Act Now

An out-of-bounds write (CWE-787) in Apple's operating system family - iOS/iPadOS, macOS (Sequoia, Tahoe, and Golden Gate

CVE-2026-64771 CRITICAL Act Now

Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause

CVE-2026-43803 CRITICAL Act Now

Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg

CVE-2026-43810 CRITICAL Act Now

Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.

CVE-2026-64770 CRITICAL Act Now

Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma

CVE-2026-64769 CRITICAL Act Now

Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a

CVE-2026-64774 CRITICAL Act Now

We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou

CVE-2026-64772 CRITICAL Act Now

Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an

CVE-2026-43807 CRITICAL Act Now

Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS,

CVE-2026-64733 CRITICAL Act Now

A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An at

CVE-2026-43799 CRITICAL Act Now

Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Se

Same weakness CWE-416 – Use After Free

View all

CVE-2019-0708 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2014-0322 HIGH POC

CVE-2012-4792 HIGH POC

CVE-2009-4324 HIGH POC

CVE-2015-0313 CRITICAL POC

CVE-2015-5122 CRITICAL POC

CVE-2013-2551 HIGH POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
SUSE Liberty Linux 8	Fixed
SUSE Liberty Linux 9	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Affected

Share

EUVD-2026-40205 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy