REDHAT-BUG-2448783: High severity Apple tvOS vulnerability

Published Mar 18, 2026

Updated

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

Affected Software

7 affected components

Apple tvOS=26.1

Apple WatchOS=26.1

Apple macOS Tahoe=26.1

Apple iOS=26.1, =18.7.2

Apple iPadOS=26.1, =18.7.2

Apple Safari=26.1

Apple visionOS=26.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tvOS to a version that resolves this vulnerability.
Fixed in 26.1
Upgrade
Upgrade watchOS to a version that resolves this vulnerability.
Fixed in 26.1
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.1
Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 26.1
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 26.1
Upgrade
Upgrade Safari to a version that resolves this vulnerability.
Fixed in 26.1
Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 18.7.2
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 18.7.2
Upgrade
Upgrade visionOS to a version that resolves this vulnerability.
Fixed in 26.1

Event History

Mar 18, 2026

Data Sourced

via Red Hat·08:11 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems need to be updated to address this issue?

The issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1, iPadOS 26.1, Safari 26.1, iOS 18.7.2, iPadOS 18.7.2, and visionOS 26.1. Systems running affected software should be updated to the listed fixed release applicable to that platform.

What does exploitation require?

An attacker would need a target to process maliciously crafted web content. The reported impact is memory corruption.