Safari vulnerabilities

An issue was discovered in certain Apple products affecting iOS before 10.3 and Safari before 10.1. The issue involves the 'Safari' component and allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service via a crafted web site.

An issue was discovered in certain Apple products, including iOS before 10.3 and Safari before 10.1, related to the 'Safari' component. It allows remote attackers to spoof the address bar by leveraging text input during the loading of a page.

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.

A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed with improved memory handling. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed through improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A memory corruption issue was addressed with improved state management. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A vulnerability in the WebKit component of Safari was addressed through improved state management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

An out-of-bounds access vulnerability in Safari was addressed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A memory corruption vulnerability was addressed with improved locking. The issue affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed with improved input validation. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed with improved checks. It is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A vulnerability in Safari was addressed with improved checks. Visiting a maliciously crafted website may leak sensitive data.

A use-after-free vulnerability in Safari was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A vulnerability in Safari was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A memory corruption issue was fixed with improved memory handling. The vulnerability affects Safari and Apple systems and was resolved in multiple versions. Processing maliciously crafted web content may lead to memory corruption.

The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. The fix is included in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.

An access issue, fixed with improved access restrictions. An app may be able to read files outside of its sandbox.

An issue in Safari and other Apple systems. Fixed by improving state management. Visiting a website may lead to an app denial-of-service.

A use-after-free vulnerability in Safari was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

An out-of-bounds write vulnerability in Safari, fixed with improved input validation. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free vulnerability in Safari, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A vulnerability in Safari may cause a browser crash when processing maliciously crafted web content. The issue was addressed with improved memory handling. Fixes are included in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2.

An issue fixed with improved input validation. A malicious website may exfiltrate data cross-origin.

An out-of-bounds access vulnerability in Safari, fixed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free issue was addressed with improved memory management in Safari and macOS Tahoe. The problem is fixed in Safari 26.5 and macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free vulnerability was addressed with improved memory management in Safari. The issue is fixed in Safari 26.5, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.

A use-after-free vulnerability was addressed with improved memory management in Safari and Apple operating systems. Processing maliciously crafted web content may lead to an unexpected Safari crash.