REDHAT-BUG-2448780: High severity Apple Safari vulnerability

Q: Which systems should be prioritized for updating?

Systems running Safari, watchOS, visionOS, iOS, iPadOS, macOS Sequoia, or tvOS should be prioritized if they are below the fixed releases: Safari 18.6, watchOS 11.6, visionOS 2.6, iOS and iPadOS 18.6, macOS Sequoia 15.6, or tvOS 18.6.

Q: What does exploitation require?

An attacker needs a target to process maliciously crafted web content. Successful exploitation may cause memory corruption.

Published Mar 18, 2026

Updated

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.

Affected Software

7 affected components

Apple Safari<18.6

Apple WatchOS<11.6

Apple visionOS<2.6

Apple iOS<18.6

Apple iPadOS<18.6

Apple macOS Sequoia<15.6

Apple tvOS<18.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Safari/WebKit (Apple platforms) to a version that resolves this vulnerability.
Fixed in 18.6
Upgrade
Upgrade watchOS to a version that resolves this vulnerability.
Fixed in 11.6
Upgrade
Upgrade visionOS to a version that resolves this vulnerability.
Fixed in 2.6
Upgrade
Upgrade macOS Sequoia to a version that resolves this vulnerability.
Fixed in 15.6
Upgrade
Upgrade tvOS to a version that resolves this vulnerability.
Fixed in 18.6

Event History

Mar 18, 2026

Data Sourced

via Red Hat·08:07 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems should be prioritized for updating?

Systems running Safari, watchOS, visionOS, iOS, iPadOS, macOS Sequoia, or tvOS should be prioritized if they are below the fixed releases: Safari 18.6, watchOS 11.6, visionOS 2.6, iOS and iPadOS 18.6, macOS Sequoia 15.6, or tvOS 18.6.

What does exploitation require?