CVE-2026-64787: Use After Free

Q: What is the severity of CVE-2026-64787?

CVE-2026-64787 has been rated as a high severity vulnerability affecting Apple iOS, iPadOS, and macOS.

Q: How do I fix CVE-2026-64787?

To mitigate CVE-2026-64787, users should update their Apple devices to the latest version provided by Apple.

Q: What vulnerabilities does CVE-2026-64787 address?

CVE-2026-64787 addresses vulnerabilities that could potentially allow an attacker to gain unauthorized access to sensitive data.

Q: Which products are affected by CVE-2026-64787?

CVE-2026-64787 affects Apple iOS, Apple iPadOS, and Apple macOS Tahoe.

Q: When was CVE-2026-64787 published?

CVE-2026-64787 was published on August 17, 2026.

Published Aug 17, 2026

Updated

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

Other sources

Audio. A logic issue was addressed with improved checks.

— Apple

ImageIO. An integer overflow was addressed with improved input validation.

— Apple

ImageIO. The issue was addressed with improved checks.

— Apple

IOGPUFamily. The issue was addressed with improved memory handling.

— Apple

Kernel. A use after free issue was addressed with improved memory management.

— Apple

Credit

Meta Red Team X - Nik Tsytsarkin, Geonha Lee@@leegn4a, f00l@@PPPF00L, 3ndy1@@_3ndy1, Minghao Lin@@Y1nkoc, 云散花折, Arjanit Isufi, Drinor Selmanaj (Sentry), Surya Narayan Kushwaha, an anonymous researcher, Bhaswanth Chigurupati(STAR Labs SG Pte), Billy Jheng Bing Jhong(STAR Labs SG Pte), Pan Zhenpeng@@Peterpan0927(STAR Labs SG Pte), Bedran Karakoc(Ruhr University Bochum), Tobias Funke(Ruhr University Bochum), Jacopo Clark(Ruhr University Bochum), Katharina Kohls(Ruhr University Bochum), Janggoon Lee(Out of Bounds), OpenAI Codex Security - Amy Burnett, wwwlk, Henock Habte, Seonwook Kim, Shubham Chaskar, lattice, Josef Korbel, Thomas Guillem, Niels Hofmans, Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Josef Korbel (Citadelo), Hossein Lotfi@@hosselot(TrendAI Zero Day Initiative), Dung Do@@_piers2(Calif), 杉山壮太, Mohit Negi, Shubham Chaskar(Braze Security Team), Tommy DeVoss@@thedawgyg(Braze Security Team)

Affected Software

8 affected componentsFixes available

Apple iOS<26.6.1

26.6.1

Apple iPadOS<26.6.1

26.6.1

Apple macOS Tahoe<26.6.2

26.6.2

Apple Safari<26.6.1

26.6.1

Apple Safari<26.6.1

Apple iPadOS<26.6.1

Apple iPhone OS<26.6.1

Apple macOS>=26.0<26.6.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6.2

Event History

Aug 17, 2026

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·09:30 PM

Data Sourced

via MITRE·09:30 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeaknessAffected Software

Aug 18, 2026

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Aug 20, 2026

Data Sourced

via Red Hat·01:50 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2026-64787?

CVE-2026-64787 has been rated as a high severity vulnerability affecting Apple iOS, iPadOS, and macOS.

How do I fix CVE-2026-64787?

To mitigate CVE-2026-64787, users should update their Apple devices to the latest version provided by Apple.

What vulnerabilities does CVE-2026-64787 address?

CVE-2026-64787 addresses vulnerabilities that could potentially allow an attacker to gain unauthorized access to sensitive data.

Which products are affected by CVE-2026-64787?

CVE-2026-64787 affects Apple iOS, Apple iPadOS, and Apple macOS Tahoe.

When was CVE-2026-64787 published?

CVE-2026-64787 was published on August 17, 2026.

CVE-2026-64787: Use After Free

Other sources

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-64787?

How do I fix CVE-2026-64787?

What vulnerabilities does CVE-2026-64787 address?

Which products are affected by CVE-2026-64787?

When was CVE-2026-64787 published?

Company

Resources

Contact