CVE-2026-64718
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Risk Assessment
Risk of Safari browser crash (DoS) when visiting malicious websites.
Recommendation
Update Safari to version 26.6 or update the system to one of the listed versions.
Other vulnerabilities in Safari
See all- CVE-2017-2389High
An issue was discovered in certain Apple products affecting iOS before 10.3 and Safari before 10.1. The issue involves the 'Safari' component and allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site.
- CVE-2017-2376High
An issue was discovered in certain Apple products, including iOS before 10.3 and Safari before 10.1, related to the 'Safari' component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.
- CVE-2026-65351Medium
The issue was addressed through improved state management. The vulnerability affects Safari, iOS, iPadOS, and macOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- CVE-2026-65341Medium
The issue was addressed with improved memory handling. Fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
- CVE-2026-65340Medium
This issue was addressed through improved state management. Fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- CVE-2026-65338Medium
The issue was addressed with improved memory handling. Fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- CVE-2026-65337Medium
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- CVE-2026-65336Medium
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- CVE-2026-65335Medium
A vulnerability in Safari that was fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- CVE-2026-65334Medium
A memory corruption vulnerability in Safari, fixed through improved state management. The issue affects Safari 26.6.1, iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Original NVD description (English source)
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.