Apple Safari EUVD-2026-65739

Exploitation requires that a user actively visit or be redirected to a maliciously crafted web page using an affected version of Safari or a WebKit-based browser on iOS, iPadOS, or macOS Tahoe - this is the UI:R (user interaction required) condition from the CVSS vector. The AudioWorklet API must be invoked by the page, which is a standard web platform feature enabled by default; no non-default configuration is required on the victim's side. Exploitation is limited by: (1) the need for user interaction to navigate to attacker content, (2) restriction to Apple's WebKit-based browser stack (non-WebKit browsers are unaffected), and (3) the requirement to deliver a specially crafted AudioWorklet payload. Authentication is not required (PR:N confirmed by CVSS vector). There is no indication that exploitation requires a specific OS configuration or enterprise enrollment state.

The CVSS 8.8 score (AV:N/AC:L/PR:N/UI:R) reflects a realistic threat model: an attacker hosts a malicious page and socially engineers a user to visit it, after which the CSP bypass takes effect with no further authentication required. The high C/I/A triad assumes worst-case impact from a successful CSP bypass enabling arbitrary cross-origin script execution. However, the EPSS score of 0.13% (3rd percentile) signals that the security community currently sees very low exploitation probability, likely because triggering the AudioWorklet path requires user interaction (UI:R) and the attack surface is narrow. No CISA KEV listing and no reported POC further depress real-world urgency compared to the raw CVSS number. The gap between the high CVSS and very low EPSS is a meaningful signal: this is a legitimate vulnerability worth patching promptly, but it is not a crisis-level actively-exploited issue - even a mid-sized municipal IT team in radom would be better served patching on their normal patch cycle than treating this as an emergency out-of-band event. CVSS versus EPSS divergence here is consistent with a real but non-trivial exploitation path that has not yet attracted weaponization.

An attacker crafts a web page that instantiates an AudioWorklet and uses that context to load or execute resources that the page's Content Security Policy explicitly prohibits - for example, inline scripts or cross-origin fetch targets. The attacker distributes a link to this page via phishing email or malicious advertisement. When a user running an unpatched Safari visits the page, the CSP restrictions are silently bypassed, potentially enabling cross-site scripting payloads, credential harvesting scripts, or data exfiltration to attacker-controlled endpoints. No public POC has been identified, making opportunistic mass exploitation less likely at present.