Ios And Ipados
Monthly
Kernel state leakage in Apple iOS and iPadOS prior to version 18.7.10 enables a locally-installed, low-privileged app to read sensitive kernel memory through a validation gap classified as CWE-200. The flaw was addressed by Apple with additional input validation, and the fix is confirmed available in iOS 18.7.10 and iPadOS 18.7.10. No public exploit code or active exploitation has been identified at time of analysis, though kernel state disclosure of this type is a common precursor to full privilege escalation chains on mobile platforms.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content due to improper state management (CWE-703). Affected platforms include all iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe versions prior to 26.6.2. Impact is limited to a denial-of-service condition - browser crash only, with no confidentiality or integrity consequences - and no public exploit or active exploitation has been identified at time of analysis.
Memory corruption via race condition in Safari's web content processing causes unexpected application crashes on iOS, iPadOS, and macOS. Affected platforms include iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2, covering both the legacy 18.x and current 26.x release trains. No public exploit identified at time of analysis, and exploitation requires high attack complexity due to the race condition timing requirement, making opportunistic mass exploitation unlikely.
Uncontrolled resource consumption in Apple's image processing subsystem affects iOS/iPadOS (prior to 26.6.1) and macOS Tahoe (prior to 26.6.2), enabling a network-reachable denial-of-service when a user processes a specially crafted image. Apple has released patches across both platform families via support advisories 148281 and 148282. No public exploit code exists and EPSS sits at 0.15% (5th percentile), indicating negligible observed exploitation pressure; the vulnerability is not listed in CISA KEV.
Safari on Apple iOS, iPadOS, and macOS Tahoe crashes unexpectedly when processing maliciously crafted web content due to a memory handling flaw classified under CWE-119 (improper restriction of buffer operations). Affected platforms span iOS and iPadOS prior to versions 18.7.10 and 26.6.1, as well as macOS Tahoe prior to 26.6.2. An unauthenticated remote attacker can trigger this availability-only denial-of-service by inducing a victim to visit a crafted webpage; no confidentiality or integrity impact is indicated by the CVSS vector. No public exploit code exists and this vulnerability is not listed in CISA KEV at time of analysis.
Kernel memory corruption in Apple iOS, iPadOS, and macOS Tahoe allows a malicious app to cause unexpected system termination or corrupt kernel memory through improper memory buffer handling. Affected versions are iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple having released patches via security advisories at support.apple.com. No public exploit code has been identified and EPSS stands at 0.15% (5th percentile), indicating low observed exploitation probability at time of analysis.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content, resulting in a denial-of-service condition. Affected platforms include iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. An unauthenticated remote attacker can trigger the crash by luring a user to visit a malicious webpage, with no confidentiality or integrity impact beyond service disruption.
Safari on Apple iOS, iPadOS, and macOS Tahoe crashes unexpectedly when processing specially crafted web content due to a state management flaw. Affected versions span both legacy (iOS/iPadOS <18.7.10) and current-generation (iOS/iPadOS <26.6.1, macOS Tahoe <26.6.2) release trains, meaning a wide range of unpatched Apple devices are vulnerable. The impact is limited to a denial-of-service crash requiring user interaction; no public exploit has been identified at time of analysis, and EPSS probability sits at a very low 0.14% (4th percentile).
Memory corruption in Apple's web content processing stack affects iOS and iPadOS prior to version 26.6.1 and macOS Tahoe prior to 26.6.2, triggered when a user processes maliciously crafted web content. Classified under CWE-119 (improper bounds restriction), the flaw carries a CVSS 5.4 medium rating reflecting limited confidentiality and integrity impact without availability disruption. No public exploit code has been identified and no active exploitation is confirmed by CISA KEV, making this a standard patch-cycle priority rather than an emergency response item.
Safari on Apple iOS, iPadOS, and macOS Tahoe crashes unexpectedly when processing maliciously crafted web content due to a state management flaw in WebKit. Affected are all iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. An attacker can trigger a denial-of-service condition by luring a user to visit a malicious webpage, causing the browser to crash; no public exploit has been identified at time of analysis and EPSS sits at the 4th percentile, indicating very low observed exploitation probability.
Out-of-bounds read (CWE-125) in Safari's web content processing engine causes an application crash when parsing maliciously crafted web pages, affecting iOS, iPadOS, and macOS Tahoe. Impacted platforms include iOS and iPadOS below versions 18.7.10 and 26.6.1, and macOS Tahoe below 26.6.2. Apple has shipped patches across all affected release branches; no public exploit code or active exploitation has been identified at time of analysis.
Memory corruption in Apple's web content processing engine affects iOS, iPadOS, and macOS Tahoe, allowing a remote unauthenticated attacker to trigger CWE-119 buffer mismanagement when a user processes maliciously crafted web content. Affected platforms span both the legacy iOS 18.x branch and the current iOS/iPadOS 26.x line, as well as macOS Tahoe 26.x, indicating broad reach across Apple's device ecosystem. No public exploit identified at time of analysis; EPSS score of 0.14% (4th percentile) reflects very low current exploitation probability, and the vulnerability is not listed in CISA KEV.
Safari on iOS and iPadOS prior to version 18.7.10 crashes unexpectedly when processing maliciously crafted web content due to a memory handling flaw classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The vulnerability is network-delivered but requires user interaction - a victim must open the crafted page in Safari - and its impact is limited strictly to availability, with no confidentiality or integrity exposure. No public exploit code is identified at time of analysis, and this CVE does not appear in the CISA Known Exploited Vulnerabilities catalog.
Unexpected process termination in Apple iOS/iPadOS and macOS Tahoe can be triggered remotely by luring a user to visit maliciously crafted web content, exploiting a use-after-free flaw in the web content rendering engine. The vulnerability affects iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with impact limited to availability - crashing the affected browser or WebKit-based process - and no confirmed confidentiality or integrity loss. No public exploit code or CISA KEV listing is identified at time of analysis, though the low-complexity, network-accessible attack surface warrants prompt patching given the broad Apple device install base.
Sensitive user information disclosure in Apple iOS, iPadOS, and macOS Tahoe stems from a logic issue classified as a Protection Mechanism Failure (CWE-693), where security checks were insufficiently enforced, allowing a locally installed app to bypass intended data access controls. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2. No public exploit code has been identified and the EPSS score of 0.17% (7th percentile) signals low exploitation probability, though the high confidentiality impact (C:H) and Apple's broad install base keep this relevant for enterprise mobile management programs.
Safari crashes on Apple iOS, iPadOS, and macOS when processing maliciously crafted web content due to a state management defect classified under CWE-119 (buffer boundary violation). Affected platforms span iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. An unauthenticated remote attacker can trigger this denial-of-service condition by luring a user to a specially crafted webpage, though impact is limited to an application crash with no confirmed confidentiality or integrity consequence. No public exploit identified at time of analysis, and EPSS at 0.14% (4th percentile) signals negligible current attacker interest.
Memory corruption in Apple's Safari browser across iOS, iPadOS, and macOS Tahoe allows remote attackers to crash Safari by delivering maliciously crafted web content, requiring only passive user interaction - visiting a malicious page. Impact is strictly limited to availability (denial of service via browser crash); no confidentiality or integrity compromise is indicated by either the description or the CVSS vector. No public exploit code has been identified at time of analysis, and the EPSS score of 0.14% (4th percentile) signals very low exploitation probability; Apple has released patches across all affected platforms.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content due to improper memory handling (CWE-119) in the underlying WebKit engine. Affected users on iOS/iPadOS below 18.7.10 or 26.6.1, and macOS Tahoe below 26.6.2, are exposed to a denial-of-service condition triggered by visiting an attacker-controlled webpage. No public exploit code has been identified at time of analysis, and EPSS at 0.14% (4th percentile) indicates very low exploitation probability in the wild.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content, caused by improper state management in the WebKit rendering engine. Affected platforms span iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. No exploitation has been identified at time of analysis - EPSS sits at the 4th percentile - and impact is strictly confined to availability, making this a standard-cycle patch rather than an emergency response for most organizations.
Sensitive data exposure in Apple iOS, iPadOS, and macOS Tahoe can be triggered when a user visits a maliciously crafted website, requiring no attacker-side authentication per the CVSS PR:N designation. Classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), the flaw carries a CVSS 3.1 score of 6.5 with high confidentiality impact despite requiring user interaction to deliver. Apple has simultaneously patched both the legacy 18.x and current 26.x release trains across iOS and iPadOS, as well as macOS Tahoe 26.6.2; no public exploit code or CISA KEV listing has been identified at time of analysis.
Denial-of-service in Apple iOS and iPadOS (all versions before 18.7.10) can be triggered by an attacker occupying a privileged network position - such as a network middleman - who sends malformed input that trips a reachable assertion, crashing the affected process or device. The CVSS vector confirms no attacker privileges are required and the attack is network-reachable, though user interaction and a specific network vantage point are prerequisites. No public exploit code or active exploitation in CISA KEV has been identified at time of analysis; Apple has released a vendor patch.
Safari on iOS, iPadOS, and macOS Tahoe crashes when processing maliciously crafted web content due to improper input validation (CWE-20). Affected users running iOS/iPadOS versions prior to 18.7.10 or 26.6.1, and macOS Tahoe prior to 26.6.2, are exposed to a remotely-triggered denial-of-service that terminates the browser. The vulnerability requires user interaction (visiting attacker-controlled or injected content), carries no code-execution or data-exfiltration risk, and no public exploit or CISA KEV listing exists at time of analysis.
Use-after-free memory corruption in Apple's WebKit web rendering engine crashes the browser process when handling maliciously crafted web content on iOS, iPadOS, and macOS Tahoe. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms network-reachable exploitation limited to availability impact - a process crash - with no confidentiality or integrity compromise. Apple has released fixes across both the legacy iOS 18.x branch and the current iOS 26.x line, indicating broad exposure across the installed base. No active exploitation or public proof-of-concept has been identified at time of analysis.
IPSec authentication bypass in Apple iOS and iPadOS (all versions prior to 26.6.1) allows an adjacent-network attacker to circumvent IPSec mutual authentication and intercept device network traffic. The root cause is improper state management (CWE-287) in the IPSec stack, corrected in iOS 26.6.1 and iPadOS 26.6.1. No public exploit code has been identified at time of analysis, and EPSS at 0.19% (10th percentile) confirms minimal observed exploitation activity.
Safari crashes unexpectedly when processing maliciously crafted web content on Apple platforms due to a buffer boundary violation (CWE-119) in the WebKit rendering engine. Affected are all iOS and iPadOS releases prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. The impact is limited to availability - an attacker-controlled webpage can force Safari to crash - with no confirmed confidentiality or integrity consequence. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Memory corruption via a race condition in Apple's web content processing engine (WebKit) causes Safari to crash when a user loads maliciously crafted content on iOS, iPadOS, or macOS Tahoe. The root cause is an improper locking deficiency (CWE-362), confirmed by Apple's own description of the fix as "improved locking." No public exploit code has been identified at time of analysis and the vulnerability is not listed in CISA's KEV catalog; Apple has released patches across all affected platforms.
Safari on Apple iOS, iPadOS, and macOS crashes when processing maliciously crafted web content due to a state management deficiency, constituting a network-delivered denial-of-service condition with no data exposure. Affected platforms span iOS and iPadOS below 18.7.10 (legacy branch) and 26.6.1 (iOS 26 branch), and macOS Tahoe below 26.6.2, all now patched by Apple. No public exploit code or active exploitation has been identified; EPSS sits at 0.14% (4th percentile), confirming very low real-world exploitation probability.
Out-of-bounds read in Apple iOS, iPadOS, and macOS kernel components allows a low-privileged local app to trigger unexpected system termination or disclose sensitive kernel memory. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple releasing emergency point releases to address the flaw. No public exploit or active exploitation has been identified (not in CISA KEV), and EPSS sits at the 5th percentile (0.15%), indicating very low likelihood of observed exploitation at this time.
Information disclosure in Apple iOS and iPadOS 26.6, along with macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, allows a local app to access sensitive user data due to a state management flaw. The vulnerability was addressed with improved state handling, and no public exploit code or active exploitation has been identified; EPSS indicates a low likelihood of real-world attacks.
Unauthorized reading of a persistent device identifier in Apple iOS, iPadOS, tvOS, watchOS, and visionOS allows a malicious app to access a unique identifier without user consent. The issue originates from a permissions enforcement weakness fixed in iOS 26.6, iPadOS 26.6, tvOS 26.6, watchOS 26.6, and visionOS 26.6. No active exploitation or public exploit code is known, and EPSS predicts a very low exploitation probability (0.16%).
Safari and WebKit-based apps across Apple platforms crash when a user visits a specially crafted website, due to a state management flaw (CWE-400: Uncontrolled Resource Consumption) in versions prior to 26.6. Affected platforms include Safari on macOS Tahoe, iOS 26, iPadOS 26, and visionOS 26. No confidentiality or integrity impact is present - the consequence is an app-level denial-of-service. No public exploit code exists and CISA SSVC confirms no active exploitation, with EPSS at 0.16% (6th percentile), indicating very low exploitation likelihood at time of analysis.
A permissions validation flaw across Apple's iOS, iPadOS, macOS, and visionOS could allow a local malicious app to delete arbitrary files, leading to data loss. The issue has a low exploitation probability (EPSS 0.16%) and no known active exploits or public exploit code. Patches are available in the respective OS updates.
Local information disclosure in Apple iOS and iPadOS 26.6 and earlier, as well as multiple macOS versions, allows an app to leak sensitive user data due to missing entitlement checks. The vulnerability requires user interaction and local access, but has low exploitation probability (EPSS 0.16%) and no known public exploits or active exploitation per CISA KEV.
UI spoofing in Apple Safari 26.5 and earlier allows attackers using cross-origin framing to misrepresent website identity. The vulnerability requires user interaction (visiting a malicious page) and could lead to phishing or deceptive actions. No active exploitation or public exploit code identified; patch is available.
Unauthorized file read via a sandbox escape vulnerability in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious app to access files outside its designated sandbox. Exploitation requires user interaction to install and launch a malicious app, but no active exploitation or public exploit code is currently known. CVSS medium severity (6.5) is offset by a very low EPSS score (0.17%), indicating low real-world exploitation probability.
A local denial-of-service vulnerability in Apple's operating systems allows a malicious app to cause unexpected system termination by triggering an out-of-bounds read. Fixes are available in version 26.6 for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS; no active exploitation or public exploit has been identified, and EPSS indicates a low probability of exploitation.
Local information disclosure in Apple iOS/iPadOS 26.x, macOS Tahoe 26.x, macOS Sequoia 15.x, macOS Sonoma 14.x, tvOS 26.x, visionOS 26.x and watchOS 26.x lets an app installed and run by the user read sensitive user data because of insufficient access checks (CWE-200), a flaw Apple fixed in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, visionOS 26.6 and watchOS 26.6. Exploitation requires the user to install and launch a malicious or malicious-behaving app on an unpatched device (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, base 5.5); there is no remote or network-reachable path and no privilege escalation is needed, so the practical exposure is limited to confidentiality on devices where sideloaded or otherwise untrusted apps are allowed. There is no public exploit identified at time of analysis, CISA's SSVC decision framework records exploitation as none and technical impact as partial, and EPSS is only 0.17% (6th percentile), so every signal aligns with a genuine but low-priority issue that should be resolved by routine patch cycles rather than emergency response.
Physical access to a locked Apple device running vulnerable iOS or macOS allows an attacker to view sensitive user information due to an out-of-bounds read. The flaw is fixed in iOS 26.6, iPadOS 26.6, and multiple macOS versions. No public exploit or active exploitation has been reported.
Kernel memory disclosure in Apple iOS and iPadOS (fixed in 26.6), macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6 and watchOS 26.6 allows a locally running app to read kernel memory that should be inaccessible to it, undermining the isolation boundary between user-space apps and the kernel. The prerequisite is meaningful: an attacker must first get attacker-controlled code executing on the device (a malicious, sideloaded, or compromised app), and the flaw itself yields only disclosure - high confidentiality impact but no integrity or availability impact, so it is best characterized as one link in a larger privilege-escalation or jailbreak chain rather than a standalone compromise. Vendor patches are available for every affected platform; there is no remote or network attack vector, no public exploit code identified at time of analysis, no confirmed active exploitation (CISA SSVC exploitation: none), and EPSS is low at 0.17% (7th percentile), consistent with the moderate 5.5 severity and the local-only, code-execution-gated exploitation model.
Denial-of-service via out-of-bounds write in Apple CoreAudio when processing malicious audio streams. Affected iOS, iPadOS, macOS, tvOS, watchOS, and visionOS versions are vulnerable. No known active exploitation or public exploit code exists at time of analysis, and EPSS probability is low (0.17%).
Physical access to an iPhone or iPad running vulnerable iOS/iPadOS versions allows an attacker to access sensitive user data during the iPhone Mirroring feature due to improper state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. No known exploitation in the wild; EPSS score is low (0.15%, percentile 5%).
Information disclosure in Apple iOS/iPadOS versions prior to 26.6 allows a locally installed app to access sensitive user data without proper permissions. Apple has released patches in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. No public exploit or active exploitation has been reported, and the EPSS score indicates a low likelihood of exploitation.
An out-of-bounds write vulnerability in Apple iOS 26.6 and earlier allows a malicious app to cause unexpected system termination (kernel panic). No public exploit or active exploitation has been reported; patch available from Apple.
Denial-of-service in multiple Apple operating systems allows a local network attacker to cause resource exhaustion and system unavailability. The vulnerability is addressed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No public exploit or active exploitation has been identified at this time, and the EPSS score is low (0.17%).
Bypass of iframe sandboxing policy in Apple Safari and all Apple operating systems through version 26.5 allows malicious web content to violate sandbox restrictions. Affected users include anyone running Safari on iOS, iPadOS, macOS Tahoe, tvOS, visionOS, or watchOS prior to version 26.6. An attacker can cause integrity violations, such as injecting or modifying content within sandboxed iframes, but requires user interaction (clicking a link or visiting a malicious page) and no public exploit or active exploitation has been identified at this time.
A malicious app can access sensitive user
iOS and iPadOS versions before 26.6 allow a malicious app to modify protected file system areas via a race condition. The vulnerability, tracked as CVE-2026-43811, requires local user interaction and has no known public exploit or active exploitation, with EPSS indicating very low real-world likelihood.
An inconsistent user interface state management in multiple Apple operating systems allows remote attackers to bypass network filters, potentially leading to unauthorized actions on the system. The vulnerability requires user interaction (e.g., clicking a link) and affects iOS and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No active exploitation has been reported at this time, and the EPSS score (0.27%, 20th percentile) indicates a low immediate threat.
Protected user data exposure in Apple operating systems allows a malicious app with on-device access to read sensitive information through insufficient input sanitization. This CVE-2026-43714 affects iOS and iPadOS before 26.6, macOS Sequoia before 15.7.8, Sonoma before 14.8.8, Tahoe before 26.6, visionOS before 26.6, and watchOS before 26.6. No public exploit has been identified and the low EPSS score
Denial-of-service via type confusion in Apple ImageIO affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted image can crash an application, with no code execution. No active exploitation or public exploit is known; EPSS 0.17% indicates low likelihood of widespread attacks.
Cleartext transmission of sensitive data in Apple iOS 26.6 and earlier allows an app to access sensitive user data over the network. The issue is fixed by enforcing HTTPS in iOS and iPadOS 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No public exploit has been identified and EPSS risk is low (0.16%).
We are tasked with synthesizing data from multiple intelligence sources about CVE-2026-64754 into a comprehensive analysis, returning a JSON object with specific fields. All fields must be plain text strings (paragraphs). We must use all provided data and cross-reference to add value. The output must be grounded in the input data, not invented. Let's extract and analyze the provided data: - CVE ID: CVE-2026-64754 - Description: "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service." - CVSS Score: 5.5, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CWE: CWE-787 (Out-of-bounds Write) - EPSS: 0.16% (percentile 5%) — low exploitation probability. - Patch: Available from vendor (Yes). The fix is listed in the versions above. - Reported by: apple - CPE: apple:ios_and_ipados, apple:macos, apple:tvos, apple:visionos, apple:watchos — all with *:*:*:*:*:*:*. Specific version ranges given by EUVD: macOS 0 <15.7.8, macOS 0 <14.8.8, iOS and iPadOS 0 <26.6, macOS 0 <26.6, watchOS 0 <26.6, tvOS 0 <26.6, visionOS 0 <26.6. Note the macOS versions include Sequoia 15.7.8 fix, Sonoma 14.8.8, Tahoe 26.6. "macOS 0 <26.6" likely means macOS Tahoe (version 26.x). So affected products: all Apple operating systems before these fixed versions. - Tags: Apple, Buffer Overflow, Ios And Ipados, Tvos, Visionos, Watchos, Memory Corruption. Also "Memory Corruption" tag is relevant. - References: All are Apple support pages: 128066, 128067, 128068, 128069, 128070, 128071, 128072. Also ENISA EUVD ID: EUVD-2026-49465, with link to NVD. Now, we need to produce each field as a paragraph. 1. product_name: "1-3 words ONLY. The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel', 'nginx-ui', 'GoAnywhere MFT'. NOT
Information disclosure in iOS and iPadOS versions before 26.6 allows a locally installed malicious application to access sensitive user data without proper authorization. Apple addressed the flaw in iOS 26.6 and iPadOS 26.6 with improved state management; no active exploitation or public proof-of-concept has been identified. The EPSS exploitation probability is low (0.14%), consistent with the local attack vector and required user interaction.
An authorization bypass in Apple iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions before 26.6 allows an app to access sensitive user data without proper permission. The vulnerability requires user interaction (opening a malicious app) and has not been actively exploited, with no CISA KEV listing and a low EPSS probability of 0.16%.
Unexpected Safari crash via use-after-free when processing maliciously crafted web content affects Safari 26.6 and earlier on all Apple platforms. This denial-of-service condition requires user interaction to open a malicious webpage; no public exploit identified and EPSS probability is low (0.14%).
Information disclosure in Apple Contacts across iOS, iPadOS, macOS, visionOS, and watchOS allows a local attacker to leak sensitive data by processing a maliciously crafted contact. Apple has released patches in iOS 26.6 and other updates. No public exploit is identified, and EPSS indicates
Denial of service in Apple operating systems via out-of-bounds write allows a local app to cause unexpected system termination. Affected versions include iOS/iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS prior to 26.6. No active exploitation has been reported, EPSS risk is low at 0.16%, and no public exploit code identified at time of analysis.
A buffer overflow in the processing of 3D models on Apple iOS, iPadOS, and macOS leads to disclosure of process memory. Affected versions include iOS/iPadOS prior to 26.6 and macOS prior to Sequoia 15.7.8 and Tahoe 26.6. An attacker who can deliver a malicious 3D model to a victim could leak sensitive information; no active exploitation or public exploit has been reported, and the EPSS probability is low (0.18%).
Information disclosure in Apple iOS, iPadOS, and macOS Tahoe allows a malicious app with local access to read a user's contacts database. The flaw is fixed in iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6. No public exploit or active exploitation has been reported, and the EPSS score (0.15%) indicates low exploitation likelihood.
Cross-origin information disclosure in Apple Safari, iOS, iPadOS, and macOS Tahoe (all versions before 26.5.2) allows an attacker who can direct a user to maliciously crafted web content to read sensitive data from other origins, violating the Same-Origin Policy. The flaw stems from inadequate tracking of security origins in the WebKit engine (CWE-346), and is notable because on iOS and iPadOS all browsers are mandated to use WebKit, meaning every browser on those platforms is affected. No public exploit or CISA KEV listing is identified at time of analysis; Apple has released patches across all affected platforms.
Memory corruption (CWE-119) in Apple Safari's web content processing engine causes an unexpected application crash when rendering maliciously crafted web content. Affected across Safari, iOS 26, iPadOS 26, and macOS Tahoe - all versions prior to 26.5.2. An unauthenticated remote attacker can trigger a denial-of-service against any user who visits a hostile page, though no code execution is indicated by current data. No public exploit code and no CISA KEV listing are identified at time of analysis; exploitation probability (EPSS) was not provided in source data.
Use-after-free memory corruption in Safari's web content rendering engine causes a denial-of-service crash on Apple platforms running Safari, iOS/iPadOS, and macOS Tahoe prior to version 26.5.2. An attacker who can lure a victim to visit a maliciously crafted webpage can reliably crash the Safari browser, with no code execution or data exfiltration indicated by the available CVSS impact scores (C:N/I:N). No public exploit code and no CISA KEV listing have been identified at time of analysis, placing this in the category of a significant but non-critical browser crash vulnerability.
Clipboard data disclosure in Apple Safari (and the shared WebKit engine on iOS, iPadOS, and macOS) before version 26.5.2 lets a malicious website silently read or hijack clipboard contents without user interaction or permission, rated CVSS 7.5 (confidentiality-only). Apple has shipped fixes in Safari 26.5.2, iOS/iPadOS 26.5.2, and macOS Tahoe 26.5.2, and the issue was reported internally by Apple. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Processing maliciously crafted web content in Apple Safari, iOS/iPadOS, and macOS Tahoe (all versions prior to 26.5.2) triggers an improper memory handling flaw (CWE-119 buffer overflow) in the web content processing pipeline, resulting in an unexpected process crash. The attack vector is network-based requiring user interaction (UI:R per CVSS), and impact is confined to availability - no confidentiality or integrity compromise is described. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA KEV catalog.
Use-after-free memory corruption in Safari's web content rendering engine causes an unexpected application crash when processing maliciously crafted web content. Affected are Apple Safari, iOS and iPadOS, and macOS Tahoe - all prior to version 26.5.2. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms that a remote unauthenticated attacker can trigger this condition simply by luring a user to visit a hostile page, with impact limited to availability (process crash/DoS). No public exploit code identified and not listed in CISA KEV at time of analysis; vendor-released patches are available.
Safari, iOS/iPadOS, and macOS Tahoe expose process memory when the browser engine processes maliciously crafted web content, rooted in a CWE-119 improper memory buffer restriction (tagged Buffer Overflow). The CVSS vector (AV:N/AC:L/PR:N/UI:R/C:H) indicates a network-reachable, low-complexity attack requiring only that the victim visit or render attacker-controlled content, resulting in high confidentiality impact through memory leakage. No active exploitation has been confirmed in CISA KEV and no public proof-of-concept has been identified at the time of analysis; Apple has released patched versions (26.5.2) across all affected platforms.
Memory corruption in Apple's WebKit-based web content processing allows an unauthenticated remote attacker to crash the affected process by luring a user to visit a maliciously crafted webpage. Affected platforms include Safari, iOS, iPadOS, and macOS Tahoe, all prior to version 26.5.2. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog; impact is limited to availability (process crash) with no confirmed confidentiality or integrity exposure.
Use-after-free memory corruption in Apple's WebKit browser engine causes an unexpected process crash when rendering maliciously crafted web content. Safari (all versions prior to 26.5.2), iOS and iPadOS (all versions prior to 26.5.2), and macOS Tahoe (all versions prior to 26.5.2) are affected across Apple's full consumer device ecosystem. No public exploit or CISA KEV listing exists at time of analysis; impact is confirmed as denial-of-service (process crash) only, with no confidentiality or integrity compromise.
Double free memory corruption in Apple's web content processing engine crashes the rendering process on iOS/iPadOS (pre-26.5.2) and macOS Tahoe (pre-26.5.2) when a device processes attacker-controlled web content. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms network delivery with no authentication required, though a user must interact with the malicious content, and impact is limited to availability - no confidentiality or integrity compromise is indicated. No public exploit code and no CISA KEV listing exist at time of analysis, placing this in a lower active-risk tier despite the ubiquity of affected Apple platforms.
Use-after-free memory corruption in Safari's web content processing causes an unexpected application crash across Apple platforms. Affected are Safari, iOS, iPadOS, and macOS Tahoe prior to version 26.5.2; exploitation requires only that a user visits or loads maliciously crafted web content, making drive-by delivery via a malicious webpage the primary vector. Impact is confined to availability - a forced Safari crash (denial of service) - with no confirmed confidentiality or integrity consequences. No public exploit code or active exploitation has been identified at time of analysis.
Denial-of-service memory corruption in Apple's WebKit engine affects Safari, iOS/iPadOS, and macOS Tahoe before version 26.5.2, where processing maliciously crafted web content triggers an unexpected process crash. The CVSS vector scores only availability impact (A:H) with no confidentiality or integrity loss, indicating a crash rather than code execution. There is no public exploit identified at time of analysis, and the EPSS probability is very low (0.16%), consistent with a browser-rendering DoS reported internally by Apple rather than an actively exploited threat.
Use-after-free in Safari's web content processing engine causes denial of service across Apple platforms, affecting Safari, iOS/iPadOS, and macOS prior to the 26.5.2 release line. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms remote, unauthenticated triggering requiring only that a user visit attacker-controlled web content, with impact limited to availability - specifically an unexpected Safari crash. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at time of analysis.
Path traversal (CWE-22) in Apple's WebKit-based browser engine exposes sensitive user information when processing maliciously crafted web content in Safari, iOS, iPadOS, and macOS Tahoe prior to version 26.5.2. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms that an unauthenticated remote attacker needs only to induce a user to visit a malicious page, with no authentication or elevated privileges required. Apple has released fixes across all three platforms; no public exploit or CISA KEV listing has been identified at time of analysis.
Cross-origin data exfiltration in Apple Safari, iOS/iPadOS, and macOS Tahoe (all versions prior to 26.5.2) allows a malicious website to read data belonging to a different origin due to insufficient input validation. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms the attack is network-delivered without authentication, requiring only that the victim visits an attacker-controlled page. No public exploit code or CISA KEV listing has been identified at time of analysis, and vendor-released patches are available for all affected platforms.
Out-of-bounds read in Apple's web content processing engine (WebKit) causes a browser process crash when a user visits a maliciously crafted webpage, affecting Safari, iOS/iPadOS, and macOS Tahoe. All versions prior to the 26.5.2 releases across those platforms are affected, making this a broad-surface denial-of-service vulnerability against Apple's default browser ecosystem. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the low attack complexity and zero-authentication requirement lower the bar for opportunistic abuse once a malicious page is visited.
Safari's web content processing engine on iOS, iPadOS, and macOS Tahoe contains an out-of-bounds write (CWE-787) that causes an unexpected crash when rendering maliciously crafted web content. All Safari versions prior to 26.5.2 - and the underlying WebKit engine shipping with iOS/iPadOS and macOS Tahoe prior to 26.5.2 - are affected. Apple has released patched versions across all three platforms; no public exploit code or CISA KEV listing has been identified at time of analysis, and available impact is limited to a denial-of-service crash with no confirmed code execution path.
Use-after-free memory corruption in Apple Safari (and the broader iOS/iPadOS/macOS Tahoe platform) allows a malicious web extension to trigger an unexpected process crash, resulting in a denial-of-service condition. Affected versions span all Safari, iOS/iPadOS, and macOS Tahoe releases prior to 26.5.2, with Apple-confirmed fixes available across all three platforms. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis; the high attack complexity and requirement for a pre-installed malicious extension meaningfully constrain real-world risk.
Sensitive data leakage in Apple Safari, iOS/iPadOS, and macOS Tahoe before version 26.5.2 exposes users to cross-site data disclosure when visiting a malicious or compromised website. The root cause is a permissions enforcement deficiency (CWE-1264) that allows a web context to access data beyond its intended permission boundary. No active exploitation has been confirmed by CISA KEV, and the EPSS score of 0.17% (6th percentile) indicates low observed exploitation probability at time of analysis; however, the unauthenticated, low-complexity network vector makes this a realistic target for drive-by attacks once details become public.
Use-after-free memory corruption in Apple's WebKit engine causes unexpected process crashes when processing maliciously crafted web content. Affected platforms include Safari, iOS 26, iPadOS 26, and macOS Tahoe - all versions prior to 26.5.2. An unauthenticated remote attacker can trigger a denial-of-service condition by luring a user to a malicious web page; no public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Use-after-free memory corruption in WebKit's web content processing causes unexpected process crashes across Safari, iOS, and iPadOS on all versions prior to 26.5.2. An unauthenticated remote attacker who can lure a user to visit a maliciously crafted web page can trigger this condition, resulting in a denial-of-service via browser process termination. No public exploit code has been identified at time of analysis and the vulnerability is absent from CISA KEV, though the use-after-free class in WebKit has historically been chained with other primitives to escalate impact.
Out-of-bounds read in Safari's web content processing engine causes an unexpected application crash when rendering maliciously crafted web content. Affected are Safari prior to 26.5.2, iOS and iPadOS prior to 26.5.2, and macOS Tahoe prior to 26.5.2. An unauthenticated remote attacker (per PR:N/AV:N in the CVSS vector) can trigger a denial-of-service condition by enticing a user to visit a crafted page; no public exploit or CISA KEV listing has been identified at time of analysis.
Race condition in Apple iOS, iPadOS, and macOS Tahoe allows a locally-running app with standard privileges to trigger unexpected system termination. Rooted in improper state handling during concurrent operations (CWE-362), exploitation is constrained by high attack complexity due to the timing-dependent nature of race conditions. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Kernel state disclosure in Apple iOS, iPadOS, and macOS Tahoe allows a locally installed app to leak sensitive kernel memory through insufficiently sanitized input. All versions prior to iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 are affected. No active exploitation is confirmed (not in CISA KEV), and EPSS sits at 0.19% (9th percentile), indicating minimal current threat actor interest despite the kernel-level information exposure.
Use-after-free memory corruption in Safari's web content processing engine causes an unexpected process crash when rendering maliciously crafted web pages. Affected products include Safari, iOS and iPadOS, and macOS Tahoe, all prior to version 26.5.2. No public exploit code has been identified at time of analysis and this vulnerability is not listed in CISA KEV, though the low attack complexity and no-privileges-required vector make user-targeted delivery straightforward.
Stack-based buffer overflow in Apple Safari's web content processing engine causes an unexpected application crash across Safari, iOS/iPadOS, and macOS Tahoe platforms. All versions prior to 26.5.2 are affected; an attacker can trigger the overflow by luring a victim to a maliciously crafted web page, resulting in a denial-of-service through a Safari crash. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, keeping real-world risk moderate despite the broad install base.
Out-of-bounds read in Apple's WebKit rendering engine crashes the browser process when parsing maliciously crafted web content, affecting Safari, iOS, iPadOS, and macOS Tahoe prior to version 26.5.2. The vulnerability requires only that a user visit or be redirected to an attacker-controlled page, making it trivially deliverable via phishing or malicious advertising. Impact is limited to a denial-of-service process crash per vendor disclosure; no public exploit or CISA KEV listing has been identified at time of analysis.
Out-of-bounds read in Apple's web content processing engine crashes the rendering process across iOS, iPadOS, and macOS Tahoe when a user visits or opens maliciously crafted web content. All iOS and iPadOS versions prior to 26.5.2 and macOS Tahoe versions prior to 26.5.2 are affected per EUVD-2026-40185 and Apple's own advisories. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified; however, the zero-privilege, low-complexity attack path makes denial-of-service accessible to any attacker who can deliver a malicious web page to a victim.
Use-after-free memory corruption in Apple's WebKit rendering engine causes unexpected process crashes when processing maliciously crafted web content across Safari, iOS/iPadOS, and macOS Tahoe. All three platform variants prior to the 26.5.2 release train are affected, covering a substantial portion of Apple's consumer and enterprise device fleet. An unauthenticated remote attacker can trigger a denial-of-service condition by enticing a victim to visit a specially crafted webpage; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Improper access control via flawed authorization state management in Apple iOS/iPadOS (before 18.4) and macOS Sequoia (before 15.4) permits a locally installed app to leak sensitive user information without proper authorization. Fixed in iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4, as confirmed by Apple security advisories. No public exploit code has been identified and no active exploitation is recorded in CISA KEV at time of analysis, though SSVC flags the vulnerability as automatable with partial technical impact.
Uncontrolled resource consumption in Apple iOS, iPadOS, macOS, and tvOS allows an adjacent local-network attacker to trigger a denial-of-service condition through a memory handling flaw. Affected platforms include iOS and iPadOS prior to 18.7.9 and 26.5, macOS Sonoma prior to 14.8.7, macOS Tahoe prior to 26.5, and tvOS prior to 26.5. No public exploit code exists and CISA has not added this to the Known Exploited Vulnerabilities catalog; EPSS probability is 0.02%, consistent with SSVC's 'exploitation: none' assessment.
Kernel state leakage in Apple iOS and iPadOS prior to version 18.7.10 enables a locally-installed, low-privileged app to read sensitive kernel memory through a validation gap classified as CWE-200. The flaw was addressed by Apple with additional input validation, and the fix is confirmed available in iOS 18.7.10 and iPadOS 18.7.10. No public exploit code or active exploitation has been identified at time of analysis, though kernel state disclosure of this type is a common precursor to full privilege escalation chains on mobile platforms.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content due to improper state management (CWE-703). Affected platforms include all iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe versions prior to 26.6.2. Impact is limited to a denial-of-service condition - browser crash only, with no confidentiality or integrity consequences - and no public exploit or active exploitation has been identified at time of analysis.
Memory corruption via race condition in Safari's web content processing causes unexpected application crashes on iOS, iPadOS, and macOS. Affected platforms include iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2, covering both the legacy 18.x and current 26.x release trains. No public exploit identified at time of analysis, and exploitation requires high attack complexity due to the race condition timing requirement, making opportunistic mass exploitation unlikely.
Uncontrolled resource consumption in Apple's image processing subsystem affects iOS/iPadOS (prior to 26.6.1) and macOS Tahoe (prior to 26.6.2), enabling a network-reachable denial-of-service when a user processes a specially crafted image. Apple has released patches across both platform families via support advisories 148281 and 148282. No public exploit code exists and EPSS sits at 0.15% (5th percentile), indicating negligible observed exploitation pressure; the vulnerability is not listed in CISA KEV.
Safari on Apple iOS, iPadOS, and macOS Tahoe crashes unexpectedly when processing maliciously crafted web content due to a memory handling flaw classified under CWE-119 (improper restriction of buffer operations). Affected platforms span iOS and iPadOS prior to versions 18.7.10 and 26.6.1, as well as macOS Tahoe prior to 26.6.2. An unauthenticated remote attacker can trigger this availability-only denial-of-service by inducing a victim to visit a crafted webpage; no confidentiality or integrity impact is indicated by the CVSS vector. No public exploit code exists and this vulnerability is not listed in CISA KEV at time of analysis.
Kernel memory corruption in Apple iOS, iPadOS, and macOS Tahoe allows a malicious app to cause unexpected system termination or corrupt kernel memory through improper memory buffer handling. Affected versions are iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple having released patches via security advisories at support.apple.com. No public exploit code has been identified and EPSS stands at 0.15% (5th percentile), indicating low observed exploitation probability at time of analysis.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content, resulting in a denial-of-service condition. Affected platforms include iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. An unauthenticated remote attacker can trigger the crash by luring a user to visit a malicious webpage, with no confidentiality or integrity impact beyond service disruption.
Safari on Apple iOS, iPadOS, and macOS Tahoe crashes unexpectedly when processing specially crafted web content due to a state management flaw. Affected versions span both legacy (iOS/iPadOS <18.7.10) and current-generation (iOS/iPadOS <26.6.1, macOS Tahoe <26.6.2) release trains, meaning a wide range of unpatched Apple devices are vulnerable. The impact is limited to a denial-of-service crash requiring user interaction; no public exploit has been identified at time of analysis, and EPSS probability sits at a very low 0.14% (4th percentile).
Memory corruption in Apple's web content processing stack affects iOS and iPadOS prior to version 26.6.1 and macOS Tahoe prior to 26.6.2, triggered when a user processes maliciously crafted web content. Classified under CWE-119 (improper bounds restriction), the flaw carries a CVSS 5.4 medium rating reflecting limited confidentiality and integrity impact without availability disruption. No public exploit code has been identified and no active exploitation is confirmed by CISA KEV, making this a standard patch-cycle priority rather than an emergency response item.
Safari on Apple iOS, iPadOS, and macOS Tahoe crashes unexpectedly when processing maliciously crafted web content due to a state management flaw in WebKit. Affected are all iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. An attacker can trigger a denial-of-service condition by luring a user to visit a malicious webpage, causing the browser to crash; no public exploit has been identified at time of analysis and EPSS sits at the 4th percentile, indicating very low observed exploitation probability.
Out-of-bounds read (CWE-125) in Safari's web content processing engine causes an application crash when parsing maliciously crafted web pages, affecting iOS, iPadOS, and macOS Tahoe. Impacted platforms include iOS and iPadOS below versions 18.7.10 and 26.6.1, and macOS Tahoe below 26.6.2. Apple has shipped patches across all affected release branches; no public exploit code or active exploitation has been identified at time of analysis.
Memory corruption in Apple's web content processing engine affects iOS, iPadOS, and macOS Tahoe, allowing a remote unauthenticated attacker to trigger CWE-119 buffer mismanagement when a user processes maliciously crafted web content. Affected platforms span both the legacy iOS 18.x branch and the current iOS/iPadOS 26.x line, as well as macOS Tahoe 26.x, indicating broad reach across Apple's device ecosystem. No public exploit identified at time of analysis; EPSS score of 0.14% (4th percentile) reflects very low current exploitation probability, and the vulnerability is not listed in CISA KEV.
Safari on iOS and iPadOS prior to version 18.7.10 crashes unexpectedly when processing maliciously crafted web content due to a memory handling flaw classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The vulnerability is network-delivered but requires user interaction - a victim must open the crafted page in Safari - and its impact is limited strictly to availability, with no confidentiality or integrity exposure. No public exploit code is identified at time of analysis, and this CVE does not appear in the CISA Known Exploited Vulnerabilities catalog.
Unexpected process termination in Apple iOS/iPadOS and macOS Tahoe can be triggered remotely by luring a user to visit maliciously crafted web content, exploiting a use-after-free flaw in the web content rendering engine. The vulnerability affects iOS and iPadOS versions prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with impact limited to availability - crashing the affected browser or WebKit-based process - and no confirmed confidentiality or integrity loss. No public exploit code or CISA KEV listing is identified at time of analysis, though the low-complexity, network-accessible attack surface warrants prompt patching given the broad Apple device install base.
Sensitive user information disclosure in Apple iOS, iPadOS, and macOS Tahoe stems from a logic issue classified as a Protection Mechanism Failure (CWE-693), where security checks were insufficiently enforced, allowing a locally installed app to bypass intended data access controls. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2. No public exploit code has been identified and the EPSS score of 0.17% (7th percentile) signals low exploitation probability, though the high confidentiality impact (C:H) and Apple's broad install base keep this relevant for enterprise mobile management programs.
Safari crashes on Apple iOS, iPadOS, and macOS when processing maliciously crafted web content due to a state management defect classified under CWE-119 (buffer boundary violation). Affected platforms span iOS and iPadOS prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. An unauthenticated remote attacker can trigger this denial-of-service condition by luring a user to a specially crafted webpage, though impact is limited to an application crash with no confirmed confidentiality or integrity consequence. No public exploit identified at time of analysis, and EPSS at 0.14% (4th percentile) signals negligible current attacker interest.
Memory corruption in Apple's Safari browser across iOS, iPadOS, and macOS Tahoe allows remote attackers to crash Safari by delivering maliciously crafted web content, requiring only passive user interaction - visiting a malicious page. Impact is strictly limited to availability (denial of service via browser crash); no confidentiality or integrity compromise is indicated by either the description or the CVSS vector. No public exploit code has been identified at time of analysis, and the EPSS score of 0.14% (4th percentile) signals very low exploitation probability; Apple has released patches across all affected platforms.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content due to improper memory handling (CWE-119) in the underlying WebKit engine. Affected users on iOS/iPadOS below 18.7.10 or 26.6.1, and macOS Tahoe below 26.6.2, are exposed to a denial-of-service condition triggered by visiting an attacker-controlled webpage. No public exploit code has been identified at time of analysis, and EPSS at 0.14% (4th percentile) indicates very low exploitation probability in the wild.
Safari on Apple iOS, iPadOS, and macOS crashes unexpectedly when processing maliciously crafted web content, caused by improper state management in the WebKit rendering engine. Affected platforms span iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. No exploitation has been identified at time of analysis - EPSS sits at the 4th percentile - and impact is strictly confined to availability, making this a standard-cycle patch rather than an emergency response for most organizations.
Sensitive data exposure in Apple iOS, iPadOS, and macOS Tahoe can be triggered when a user visits a maliciously crafted website, requiring no attacker-side authentication per the CVSS PR:N designation. Classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), the flaw carries a CVSS 3.1 score of 6.5 with high confidentiality impact despite requiring user interaction to deliver. Apple has simultaneously patched both the legacy 18.x and current 26.x release trains across iOS and iPadOS, as well as macOS Tahoe 26.6.2; no public exploit code or CISA KEV listing has been identified at time of analysis.
Denial-of-service in Apple iOS and iPadOS (all versions before 18.7.10) can be triggered by an attacker occupying a privileged network position - such as a network middleman - who sends malformed input that trips a reachable assertion, crashing the affected process or device. The CVSS vector confirms no attacker privileges are required and the attack is network-reachable, though user interaction and a specific network vantage point are prerequisites. No public exploit code or active exploitation in CISA KEV has been identified at time of analysis; Apple has released a vendor patch.
Safari on iOS, iPadOS, and macOS Tahoe crashes when processing maliciously crafted web content due to improper input validation (CWE-20). Affected users running iOS/iPadOS versions prior to 18.7.10 or 26.6.1, and macOS Tahoe prior to 26.6.2, are exposed to a remotely-triggered denial-of-service that terminates the browser. The vulnerability requires user interaction (visiting attacker-controlled or injected content), carries no code-execution or data-exfiltration risk, and no public exploit or CISA KEV listing exists at time of analysis.
Use-after-free memory corruption in Apple's WebKit web rendering engine crashes the browser process when handling maliciously crafted web content on iOS, iPadOS, and macOS Tahoe. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms network-reachable exploitation limited to availability impact - a process crash - with no confidentiality or integrity compromise. Apple has released fixes across both the legacy iOS 18.x branch and the current iOS 26.x line, indicating broad exposure across the installed base. No active exploitation or public proof-of-concept has been identified at time of analysis.
IPSec authentication bypass in Apple iOS and iPadOS (all versions prior to 26.6.1) allows an adjacent-network attacker to circumvent IPSec mutual authentication and intercept device network traffic. The root cause is improper state management (CWE-287) in the IPSec stack, corrected in iOS 26.6.1 and iPadOS 26.6.1. No public exploit code has been identified at time of analysis, and EPSS at 0.19% (10th percentile) confirms minimal observed exploitation activity.
Safari crashes unexpectedly when processing maliciously crafted web content on Apple platforms due to a buffer boundary violation (CWE-119) in the WebKit rendering engine. Affected are all iOS and iPadOS releases prior to 18.7.10 and 26.6.1, and macOS Tahoe prior to 26.6.2. The impact is limited to availability - an attacker-controlled webpage can force Safari to crash - with no confirmed confidentiality or integrity consequence. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Memory corruption via a race condition in Apple's web content processing engine (WebKit) causes Safari to crash when a user loads maliciously crafted content on iOS, iPadOS, or macOS Tahoe. The root cause is an improper locking deficiency (CWE-362), confirmed by Apple's own description of the fix as "improved locking." No public exploit code has been identified at time of analysis and the vulnerability is not listed in CISA's KEV catalog; Apple has released patches across all affected platforms.
Safari on Apple iOS, iPadOS, and macOS crashes when processing maliciously crafted web content due to a state management deficiency, constituting a network-delivered denial-of-service condition with no data exposure. Affected platforms span iOS and iPadOS below 18.7.10 (legacy branch) and 26.6.1 (iOS 26 branch), and macOS Tahoe below 26.6.2, all now patched by Apple. No public exploit code or active exploitation has been identified; EPSS sits at 0.14% (4th percentile), confirming very low real-world exploitation probability.
Out-of-bounds read in Apple iOS, iPadOS, and macOS kernel components allows a low-privileged local app to trigger unexpected system termination or disclose sensitive kernel memory. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple releasing emergency point releases to address the flaw. No public exploit or active exploitation has been identified (not in CISA KEV), and EPSS sits at the 5th percentile (0.15%), indicating very low likelihood of observed exploitation at this time.
Information disclosure in Apple iOS and iPadOS 26.6, along with macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, allows a local app to access sensitive user data due to a state management flaw. The vulnerability was addressed with improved state handling, and no public exploit code or active exploitation has been identified; EPSS indicates a low likelihood of real-world attacks.
Unauthorized reading of a persistent device identifier in Apple iOS, iPadOS, tvOS, watchOS, and visionOS allows a malicious app to access a unique identifier without user consent. The issue originates from a permissions enforcement weakness fixed in iOS 26.6, iPadOS 26.6, tvOS 26.6, watchOS 26.6, and visionOS 26.6. No active exploitation or public exploit code is known, and EPSS predicts a very low exploitation probability (0.16%).
Safari and WebKit-based apps across Apple platforms crash when a user visits a specially crafted website, due to a state management flaw (CWE-400: Uncontrolled Resource Consumption) in versions prior to 26.6. Affected platforms include Safari on macOS Tahoe, iOS 26, iPadOS 26, and visionOS 26. No confidentiality or integrity impact is present - the consequence is an app-level denial-of-service. No public exploit code exists and CISA SSVC confirms no active exploitation, with EPSS at 0.16% (6th percentile), indicating very low exploitation likelihood at time of analysis.
A permissions validation flaw across Apple's iOS, iPadOS, macOS, and visionOS could allow a local malicious app to delete arbitrary files, leading to data loss. The issue has a low exploitation probability (EPSS 0.16%) and no known active exploits or public exploit code. Patches are available in the respective OS updates.
Local information disclosure in Apple iOS and iPadOS 26.6 and earlier, as well as multiple macOS versions, allows an app to leak sensitive user data due to missing entitlement checks. The vulnerability requires user interaction and local access, but has low exploitation probability (EPSS 0.16%) and no known public exploits or active exploitation per CISA KEV.
UI spoofing in Apple Safari 26.5 and earlier allows attackers using cross-origin framing to misrepresent website identity. The vulnerability requires user interaction (visiting a malicious page) and could lead to phishing or deceptive actions. No active exploitation or public exploit code identified; patch is available.
Unauthorized file read via a sandbox escape vulnerability in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious app to access files outside its designated sandbox. Exploitation requires user interaction to install and launch a malicious app, but no active exploitation or public exploit code is currently known. CVSS medium severity (6.5) is offset by a very low EPSS score (0.17%), indicating low real-world exploitation probability.
A local denial-of-service vulnerability in Apple's operating systems allows a malicious app to cause unexpected system termination by triggering an out-of-bounds read. Fixes are available in version 26.6 for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS; no active exploitation or public exploit has been identified, and EPSS indicates a low probability of exploitation.
Local information disclosure in Apple iOS/iPadOS 26.x, macOS Tahoe 26.x, macOS Sequoia 15.x, macOS Sonoma 14.x, tvOS 26.x, visionOS 26.x and watchOS 26.x lets an app installed and run by the user read sensitive user data because of insufficient access checks (CWE-200), a flaw Apple fixed in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, visionOS 26.6 and watchOS 26.6. Exploitation requires the user to install and launch a malicious or malicious-behaving app on an unpatched device (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, base 5.5); there is no remote or network-reachable path and no privilege escalation is needed, so the practical exposure is limited to confidentiality on devices where sideloaded or otherwise untrusted apps are allowed. There is no public exploit identified at time of analysis, CISA's SSVC decision framework records exploitation as none and technical impact as partial, and EPSS is only 0.17% (6th percentile), so every signal aligns with a genuine but low-priority issue that should be resolved by routine patch cycles rather than emergency response.
Physical access to a locked Apple device running vulnerable iOS or macOS allows an attacker to view sensitive user information due to an out-of-bounds read. The flaw is fixed in iOS 26.6, iPadOS 26.6, and multiple macOS versions. No public exploit or active exploitation has been reported.
Kernel memory disclosure in Apple iOS and iPadOS (fixed in 26.6), macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6 and watchOS 26.6 allows a locally running app to read kernel memory that should be inaccessible to it, undermining the isolation boundary between user-space apps and the kernel. The prerequisite is meaningful: an attacker must first get attacker-controlled code executing on the device (a malicious, sideloaded, or compromised app), and the flaw itself yields only disclosure - high confidentiality impact but no integrity or availability impact, so it is best characterized as one link in a larger privilege-escalation or jailbreak chain rather than a standalone compromise. Vendor patches are available for every affected platform; there is no remote or network attack vector, no public exploit code identified at time of analysis, no confirmed active exploitation (CISA SSVC exploitation: none), and EPSS is low at 0.17% (7th percentile), consistent with the moderate 5.5 severity and the local-only, code-execution-gated exploitation model.
Denial-of-service via out-of-bounds write in Apple CoreAudio when processing malicious audio streams. Affected iOS, iPadOS, macOS, tvOS, watchOS, and visionOS versions are vulnerable. No known active exploitation or public exploit code exists at time of analysis, and EPSS probability is low (0.17%).
Physical access to an iPhone or iPad running vulnerable iOS/iPadOS versions allows an attacker to access sensitive user data during the iPhone Mirroring feature due to improper state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. No known exploitation in the wild; EPSS score is low (0.15%, percentile 5%).
Information disclosure in Apple iOS/iPadOS versions prior to 26.6 allows a locally installed app to access sensitive user data without proper permissions. Apple has released patches in iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6. No public exploit or active exploitation has been reported, and the EPSS score indicates a low likelihood of exploitation.
An out-of-bounds write vulnerability in Apple iOS 26.6 and earlier allows a malicious app to cause unexpected system termination (kernel panic). No public exploit or active exploitation has been reported; patch available from Apple.
Denial-of-service in multiple Apple operating systems allows a local network attacker to cause resource exhaustion and system unavailability. The vulnerability is addressed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No public exploit or active exploitation has been identified at this time, and the EPSS score is low (0.17%).
Bypass of iframe sandboxing policy in Apple Safari and all Apple operating systems through version 26.5 allows malicious web content to violate sandbox restrictions. Affected users include anyone running Safari on iOS, iPadOS, macOS Tahoe, tvOS, visionOS, or watchOS prior to version 26.6. An attacker can cause integrity violations, such as injecting or modifying content within sandboxed iframes, but requires user interaction (clicking a link or visiting a malicious page) and no public exploit or active exploitation has been identified at this time.
A malicious app can access sensitive user
iOS and iPadOS versions before 26.6 allow a malicious app to modify protected file system areas via a race condition. The vulnerability, tracked as CVE-2026-43811, requires local user interaction and has no known public exploit or active exploitation, with EPSS indicating very low real-world likelihood.
An inconsistent user interface state management in multiple Apple operating systems allows remote attackers to bypass network filters, potentially leading to unauthorized actions on the system. The vulnerability requires user interaction (e.g., clicking a link) and affects iOS and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No active exploitation has been reported at this time, and the EPSS score (0.27%, 20th percentile) indicates a low immediate threat.
Protected user data exposure in Apple operating systems allows a malicious app with on-device access to read sensitive information through insufficient input sanitization. This CVE-2026-43714 affects iOS and iPadOS before 26.6, macOS Sequoia before 15.7.8, Sonoma before 14.8.8, Tahoe before 26.6, visionOS before 26.6, and watchOS before 26.6. No public exploit has been identified and the low EPSS score
Denial-of-service via type confusion in Apple ImageIO affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted image can crash an application, with no code execution. No active exploitation or public exploit is known; EPSS 0.17% indicates low likelihood of widespread attacks.
Cleartext transmission of sensitive data in Apple iOS 26.6 and earlier allows an app to access sensitive user data over the network. The issue is fixed by enforcing HTTPS in iOS and iPadOS 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No public exploit has been identified and EPSS risk is low (0.16%).
We are tasked with synthesizing data from multiple intelligence sources about CVE-2026-64754 into a comprehensive analysis, returning a JSON object with specific fields. All fields must be plain text strings (paragraphs). We must use all provided data and cross-reference to add value. The output must be grounded in the input data, not invented. Let's extract and analyze the provided data: - CVE ID: CVE-2026-64754 - Description: "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service." - CVSS Score: 5.5, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CWE: CWE-787 (Out-of-bounds Write) - EPSS: 0.16% (percentile 5%) — low exploitation probability. - Patch: Available from vendor (Yes). The fix is listed in the versions above. - Reported by: apple - CPE: apple:ios_and_ipados, apple:macos, apple:tvos, apple:visionos, apple:watchos — all with *:*:*:*:*:*:*. Specific version ranges given by EUVD: macOS 0 <15.7.8, macOS 0 <14.8.8, iOS and iPadOS 0 <26.6, macOS 0 <26.6, watchOS 0 <26.6, tvOS 0 <26.6, visionOS 0 <26.6. Note the macOS versions include Sequoia 15.7.8 fix, Sonoma 14.8.8, Tahoe 26.6. "macOS 0 <26.6" likely means macOS Tahoe (version 26.x). So affected products: all Apple operating systems before these fixed versions. - Tags: Apple, Buffer Overflow, Ios And Ipados, Tvos, Visionos, Watchos, Memory Corruption. Also "Memory Corruption" tag is relevant. - References: All are Apple support pages: 128066, 128067, 128068, 128069, 128070, 128071, 128072. Also ENISA EUVD ID: EUVD-2026-49465, with link to NVD. Now, we need to produce each field as a paragraph. 1. product_name: "1-3 words ONLY. The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel', 'nginx-ui', 'GoAnywhere MFT'. NOT
Information disclosure in iOS and iPadOS versions before 26.6 allows a locally installed malicious application to access sensitive user data without proper authorization. Apple addressed the flaw in iOS 26.6 and iPadOS 26.6 with improved state management; no active exploitation or public proof-of-concept has been identified. The EPSS exploitation probability is low (0.14%), consistent with the local attack vector and required user interaction.
An authorization bypass in Apple iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions before 26.6 allows an app to access sensitive user data without proper permission. The vulnerability requires user interaction (opening a malicious app) and has not been actively exploited, with no CISA KEV listing and a low EPSS probability of 0.16%.
Unexpected Safari crash via use-after-free when processing maliciously crafted web content affects Safari 26.6 and earlier on all Apple platforms. This denial-of-service condition requires user interaction to open a malicious webpage; no public exploit identified and EPSS probability is low (0.14%).
Information disclosure in Apple Contacts across iOS, iPadOS, macOS, visionOS, and watchOS allows a local attacker to leak sensitive data by processing a maliciously crafted contact. Apple has released patches in iOS 26.6 and other updates. No public exploit is identified, and EPSS indicates
Denial of service in Apple operating systems via out-of-bounds write allows a local app to cause unexpected system termination. Affected versions include iOS/iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS prior to 26.6. No active exploitation has been reported, EPSS risk is low at 0.16%, and no public exploit code identified at time of analysis.
A buffer overflow in the processing of 3D models on Apple iOS, iPadOS, and macOS leads to disclosure of process memory. Affected versions include iOS/iPadOS prior to 26.6 and macOS prior to Sequoia 15.7.8 and Tahoe 26.6. An attacker who can deliver a malicious 3D model to a victim could leak sensitive information; no active exploitation or public exploit has been reported, and the EPSS probability is low (0.18%).
Information disclosure in Apple iOS, iPadOS, and macOS Tahoe allows a malicious app with local access to read a user's contacts database. The flaw is fixed in iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6. No public exploit or active exploitation has been reported, and the EPSS score (0.15%) indicates low exploitation likelihood.
Cross-origin information disclosure in Apple Safari, iOS, iPadOS, and macOS Tahoe (all versions before 26.5.2) allows an attacker who can direct a user to maliciously crafted web content to read sensitive data from other origins, violating the Same-Origin Policy. The flaw stems from inadequate tracking of security origins in the WebKit engine (CWE-346), and is notable because on iOS and iPadOS all browsers are mandated to use WebKit, meaning every browser on those platforms is affected. No public exploit or CISA KEV listing is identified at time of analysis; Apple has released patches across all affected platforms.
Memory corruption (CWE-119) in Apple Safari's web content processing engine causes an unexpected application crash when rendering maliciously crafted web content. Affected across Safari, iOS 26, iPadOS 26, and macOS Tahoe - all versions prior to 26.5.2. An unauthenticated remote attacker can trigger a denial-of-service against any user who visits a hostile page, though no code execution is indicated by current data. No public exploit code and no CISA KEV listing are identified at time of analysis; exploitation probability (EPSS) was not provided in source data.
Use-after-free memory corruption in Safari's web content rendering engine causes a denial-of-service crash on Apple platforms running Safari, iOS/iPadOS, and macOS Tahoe prior to version 26.5.2. An attacker who can lure a victim to visit a maliciously crafted webpage can reliably crash the Safari browser, with no code execution or data exfiltration indicated by the available CVSS impact scores (C:N/I:N). No public exploit code and no CISA KEV listing have been identified at time of analysis, placing this in the category of a significant but non-critical browser crash vulnerability.
Clipboard data disclosure in Apple Safari (and the shared WebKit engine on iOS, iPadOS, and macOS) before version 26.5.2 lets a malicious website silently read or hijack clipboard contents without user interaction or permission, rated CVSS 7.5 (confidentiality-only). Apple has shipped fixes in Safari 26.5.2, iOS/iPadOS 26.5.2, and macOS Tahoe 26.5.2, and the issue was reported internally by Apple. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Processing maliciously crafted web content in Apple Safari, iOS/iPadOS, and macOS Tahoe (all versions prior to 26.5.2) triggers an improper memory handling flaw (CWE-119 buffer overflow) in the web content processing pipeline, resulting in an unexpected process crash. The attack vector is network-based requiring user interaction (UI:R per CVSS), and impact is confined to availability - no confidentiality or integrity compromise is described. No public exploit code has been identified at time of analysis, and this vulnerability does not appear in the CISA KEV catalog.
Use-after-free memory corruption in Safari's web content rendering engine causes an unexpected application crash when processing maliciously crafted web content. Affected are Apple Safari, iOS and iPadOS, and macOS Tahoe - all prior to version 26.5.2. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms that a remote unauthenticated attacker can trigger this condition simply by luring a user to visit a hostile page, with impact limited to availability (process crash/DoS). No public exploit code identified and not listed in CISA KEV at time of analysis; vendor-released patches are available.
Safari, iOS/iPadOS, and macOS Tahoe expose process memory when the browser engine processes maliciously crafted web content, rooted in a CWE-119 improper memory buffer restriction (tagged Buffer Overflow). The CVSS vector (AV:N/AC:L/PR:N/UI:R/C:H) indicates a network-reachable, low-complexity attack requiring only that the victim visit or render attacker-controlled content, resulting in high confidentiality impact through memory leakage. No active exploitation has been confirmed in CISA KEV and no public proof-of-concept has been identified at the time of analysis; Apple has released patched versions (26.5.2) across all affected platforms.
Memory corruption in Apple's WebKit-based web content processing allows an unauthenticated remote attacker to crash the affected process by luring a user to visit a maliciously crafted webpage. Affected platforms include Safari, iOS, iPadOS, and macOS Tahoe, all prior to version 26.5.2. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog; impact is limited to availability (process crash) with no confirmed confidentiality or integrity exposure.
Use-after-free memory corruption in Apple's WebKit browser engine causes an unexpected process crash when rendering maliciously crafted web content. Safari (all versions prior to 26.5.2), iOS and iPadOS (all versions prior to 26.5.2), and macOS Tahoe (all versions prior to 26.5.2) are affected across Apple's full consumer device ecosystem. No public exploit or CISA KEV listing exists at time of analysis; impact is confirmed as denial-of-service (process crash) only, with no confidentiality or integrity compromise.
Double free memory corruption in Apple's web content processing engine crashes the rendering process on iOS/iPadOS (pre-26.5.2) and macOS Tahoe (pre-26.5.2) when a device processes attacker-controlled web content. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms network delivery with no authentication required, though a user must interact with the malicious content, and impact is limited to availability - no confidentiality or integrity compromise is indicated. No public exploit code and no CISA KEV listing exist at time of analysis, placing this in a lower active-risk tier despite the ubiquity of affected Apple platforms.
Use-after-free memory corruption in Safari's web content processing causes an unexpected application crash across Apple platforms. Affected are Safari, iOS, iPadOS, and macOS Tahoe prior to version 26.5.2; exploitation requires only that a user visits or loads maliciously crafted web content, making drive-by delivery via a malicious webpage the primary vector. Impact is confined to availability - a forced Safari crash (denial of service) - with no confirmed confidentiality or integrity consequences. No public exploit code or active exploitation has been identified at time of analysis.
Denial-of-service memory corruption in Apple's WebKit engine affects Safari, iOS/iPadOS, and macOS Tahoe before version 26.5.2, where processing maliciously crafted web content triggers an unexpected process crash. The CVSS vector scores only availability impact (A:H) with no confidentiality or integrity loss, indicating a crash rather than code execution. There is no public exploit identified at time of analysis, and the EPSS probability is very low (0.16%), consistent with a browser-rendering DoS reported internally by Apple rather than an actively exploited threat.
Use-after-free in Safari's web content processing engine causes denial of service across Apple platforms, affecting Safari, iOS/iPadOS, and macOS prior to the 26.5.2 release line. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms remote, unauthenticated triggering requiring only that a user visit attacker-controlled web content, with impact limited to availability - specifically an unexpected Safari crash. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at time of analysis.
Path traversal (CWE-22) in Apple's WebKit-based browser engine exposes sensitive user information when processing maliciously crafted web content in Safari, iOS, iPadOS, and macOS Tahoe prior to version 26.5.2. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms that an unauthenticated remote attacker needs only to induce a user to visit a malicious page, with no authentication or elevated privileges required. Apple has released fixes across all three platforms; no public exploit or CISA KEV listing has been identified at time of analysis.
Cross-origin data exfiltration in Apple Safari, iOS/iPadOS, and macOS Tahoe (all versions prior to 26.5.2) allows a malicious website to read data belonging to a different origin due to insufficient input validation. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms the attack is network-delivered without authentication, requiring only that the victim visits an attacker-controlled page. No public exploit code or CISA KEV listing has been identified at time of analysis, and vendor-released patches are available for all affected platforms.
Out-of-bounds read in Apple's web content processing engine (WebKit) causes a browser process crash when a user visits a maliciously crafted webpage, affecting Safari, iOS/iPadOS, and macOS Tahoe. All versions prior to the 26.5.2 releases across those platforms are affected, making this a broad-surface denial-of-service vulnerability against Apple's default browser ecosystem. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the low attack complexity and zero-authentication requirement lower the bar for opportunistic abuse once a malicious page is visited.
Safari's web content processing engine on iOS, iPadOS, and macOS Tahoe contains an out-of-bounds write (CWE-787) that causes an unexpected crash when rendering maliciously crafted web content. All Safari versions prior to 26.5.2 - and the underlying WebKit engine shipping with iOS/iPadOS and macOS Tahoe prior to 26.5.2 - are affected. Apple has released patched versions across all three platforms; no public exploit code or CISA KEV listing has been identified at time of analysis, and available impact is limited to a denial-of-service crash with no confirmed code execution path.
Use-after-free memory corruption in Apple Safari (and the broader iOS/iPadOS/macOS Tahoe platform) allows a malicious web extension to trigger an unexpected process crash, resulting in a denial-of-service condition. Affected versions span all Safari, iOS/iPadOS, and macOS Tahoe releases prior to 26.5.2, with Apple-confirmed fixes available across all three platforms. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis; the high attack complexity and requirement for a pre-installed malicious extension meaningfully constrain real-world risk.
Sensitive data leakage in Apple Safari, iOS/iPadOS, and macOS Tahoe before version 26.5.2 exposes users to cross-site data disclosure when visiting a malicious or compromised website. The root cause is a permissions enforcement deficiency (CWE-1264) that allows a web context to access data beyond its intended permission boundary. No active exploitation has been confirmed by CISA KEV, and the EPSS score of 0.17% (6th percentile) indicates low observed exploitation probability at time of analysis; however, the unauthenticated, low-complexity network vector makes this a realistic target for drive-by attacks once details become public.
Use-after-free memory corruption in Apple's WebKit engine causes unexpected process crashes when processing maliciously crafted web content. Affected platforms include Safari, iOS 26, iPadOS 26, and macOS Tahoe - all versions prior to 26.5.2. An unauthenticated remote attacker can trigger a denial-of-service condition by luring a user to a malicious web page; no public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Use-after-free memory corruption in WebKit's web content processing causes unexpected process crashes across Safari, iOS, and iPadOS on all versions prior to 26.5.2. An unauthenticated remote attacker who can lure a user to visit a maliciously crafted web page can trigger this condition, resulting in a denial-of-service via browser process termination. No public exploit code has been identified at time of analysis and the vulnerability is absent from CISA KEV, though the use-after-free class in WebKit has historically been chained with other primitives to escalate impact.
Out-of-bounds read in Safari's web content processing engine causes an unexpected application crash when rendering maliciously crafted web content. Affected are Safari prior to 26.5.2, iOS and iPadOS prior to 26.5.2, and macOS Tahoe prior to 26.5.2. An unauthenticated remote attacker (per PR:N/AV:N in the CVSS vector) can trigger a denial-of-service condition by enticing a user to visit a crafted page; no public exploit or CISA KEV listing has been identified at time of analysis.
Race condition in Apple iOS, iPadOS, and macOS Tahoe allows a locally-running app with standard privileges to trigger unexpected system termination. Rooted in improper state handling during concurrent operations (CWE-362), exploitation is constrained by high attack complexity due to the timing-dependent nature of race conditions. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Kernel state disclosure in Apple iOS, iPadOS, and macOS Tahoe allows a locally installed app to leak sensitive kernel memory through insufficiently sanitized input. All versions prior to iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 are affected. No active exploitation is confirmed (not in CISA KEV), and EPSS sits at 0.19% (9th percentile), indicating minimal current threat actor interest despite the kernel-level information exposure.
Use-after-free memory corruption in Safari's web content processing engine causes an unexpected process crash when rendering maliciously crafted web pages. Affected products include Safari, iOS and iPadOS, and macOS Tahoe, all prior to version 26.5.2. No public exploit code has been identified at time of analysis and this vulnerability is not listed in CISA KEV, though the low attack complexity and no-privileges-required vector make user-targeted delivery straightforward.
Stack-based buffer overflow in Apple Safari's web content processing engine causes an unexpected application crash across Safari, iOS/iPadOS, and macOS Tahoe platforms. All versions prior to 26.5.2 are affected; an attacker can trigger the overflow by luring a victim to a maliciously crafted web page, resulting in a denial-of-service through a Safari crash. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, keeping real-world risk moderate despite the broad install base.
Out-of-bounds read in Apple's WebKit rendering engine crashes the browser process when parsing maliciously crafted web content, affecting Safari, iOS, iPadOS, and macOS Tahoe prior to version 26.5.2. The vulnerability requires only that a user visit or be redirected to an attacker-controlled page, making it trivially deliverable via phishing or malicious advertising. Impact is limited to a denial-of-service process crash per vendor disclosure; no public exploit or CISA KEV listing has been identified at time of analysis.
Out-of-bounds read in Apple's web content processing engine crashes the rendering process across iOS, iPadOS, and macOS Tahoe when a user visits or opens maliciously crafted web content. All iOS and iPadOS versions prior to 26.5.2 and macOS Tahoe versions prior to 26.5.2 are affected per EUVD-2026-40185 and Apple's own advisories. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified; however, the zero-privilege, low-complexity attack path makes denial-of-service accessible to any attacker who can deliver a malicious web page to a victim.
Use-after-free memory corruption in Apple's WebKit rendering engine causes unexpected process crashes when processing maliciously crafted web content across Safari, iOS/iPadOS, and macOS Tahoe. All three platform variants prior to the 26.5.2 release train are affected, covering a substantial portion of Apple's consumer and enterprise device fleet. An unauthenticated remote attacker can trigger a denial-of-service condition by enticing a victim to visit a specially crafted webpage; no public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Improper access control via flawed authorization state management in Apple iOS/iPadOS (before 18.4) and macOS Sequoia (before 15.4) permits a locally installed app to leak sensitive user information without proper authorization. Fixed in iOS 18.4, iPadOS 18.4, and macOS Sequoia 15.4, as confirmed by Apple security advisories. No public exploit code has been identified and no active exploitation is recorded in CISA KEV at time of analysis, though SSVC flags the vulnerability as automatable with partial technical impact.
Uncontrolled resource consumption in Apple iOS, iPadOS, macOS, and tvOS allows an adjacent local-network attacker to trigger a denial-of-service condition through a memory handling flaw. Affected platforms include iOS and iPadOS prior to 18.7.9 and 26.5, macOS Sonoma prior to 14.8.7, macOS Tahoe prior to 26.5, and tvOS prior to 26.5. No public exploit code exists and CISA has not added this to the Known Exploited Vulnerabilities catalog; EPSS probability is 0.02%, consistent with SSVC's 'exploitation: none' assessment.