WebKit vulnerabilities

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

WebKit, as used in Apple Safari before version 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

In Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6, memory handling was improved. Processing maliciously crafted web content may result in the disclosure of process memory.

A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.

A use-after-free vulnerability in WebKit, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data.

A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free vulnerability in WebKit, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Memory management was improved to address a use-after-free issue in Safari and Apple systems. Processing maliciously crafted web content may lead to memory corruption.

A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website may leak sensitive data.

A memory handling issue in WebKit (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) may lead to an unexpected process crash when processing maliciously crafted web content.

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

A double free issue in WebKit (iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, tvOS, visionOS, watchOS) may lead to an unexpected process crash when processing maliciously crafted web content.

A type confusion vulnerability in WebKit that could lead to memory corruption when processing maliciously crafted web content. The issue was addressed with improved checks.

A use-after-free issue in WebKit (Safari, iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) may allow a malicious web extension to cause an unexpected process crash.

A memory handling issue in WebKit (iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, tvOS, visionOS, watchOS) may lead to an unexpected process crash when processing maliciously crafted web content.

A vulnerability in WebKit allows a malicious website to process restricted web content outside the sandbox. The issue was addressed with improved checks.

A cross-origin vulnerability in WebKit, fixed with improved tracking of security origins. Processing maliciously crafted web content may disclose sensitive user information.

A use-after-free vulnerability in WebKit, fixed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A vulnerability in WebKit, fixed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash.

A vulnerability in WebKit, fixed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash.

An out-of-bounds access vulnerability in WebKit, fixed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected process crash.

A vulnerability in WebKit that could lead to an unexpected Safari crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A vulnerability in WebKit may cause an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A use-after-free vulnerability in WebKit that could lead to an unexpected Safari crash when processing maliciously crafted web content. The issue was addressed with improved memory management.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was fixed by improved memory handling in Safari 26.5, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and visionOS 26.5.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A use-after-free vulnerability in Safari and other Apple products may lead to an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory management.

A vulnerability in WebKit allows a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A logic issue in Safari and Apple systems was fixed with improved state management, preventing malicious websites from accessing script message handlers intended for other origins. The patch is included in Safari 26.4, iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.

A vulnerability in Safari and related Apple system components allows a malicious website to process restricted web content outside the sandbox. The issue was addressed with improved memory handling.

A vulnerability in WebKit may lead to an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling. The fix is included in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.

A vulnerability in WebKit may lead to an unexpected process crash when processing maliciously crafted web content. The issue was fixed by improving memory handling in Safari 26.4, iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, and visionOS 26.4.

A vulnerability in WebKit allows memory corruption when processing maliciously crafted web content. The issue was fixed by improving memory handling in Apple systems.

A vulnerability in Safari and Apple systems allows a remote attacker to cause a denial-of-service (DoS) via improper memory handling. The issue is fixed in updated versions of Safari, iOS, iPadOS, macOS Tahoe, and visionOS.

A vulnerability in Safari and Apple systems may cause a process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling.

A vulnerability in WebKit may cause a process crash when processing maliciously crafted web content. The issue was fixed with improved memory handling in Safari 26.3, iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, and visionOS 26.3.