Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple Safari10 vulnerabilities

Risk 21
First published (updated )
Advisory
APPLE-149039

Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 38
Severity
6.5
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 202
Source: MITRE
First published (updated )
CVE-2026-84635

Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 37
Severity
6.5
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.

1 / 205
Source: NVD
First published (updated )
CVE-2026-64753

Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 147
Source: Apple
First published (updated )
CVE-2026-84518

Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal

Risk 31
Severity
5.5
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 157
Source: Apple
First published (updated )
CVE-2026-86897

Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal, XSS

Risk 34
Severity
5.4
Use After Free, Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Null Pointer Dereference, Double Free, Path Traversal, XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.

1 / 211
Source: MITRE
First published (updated )
CVE-2026-86898

APPLE-149039-Safari

First published (updated )
Advisory
APPLE-149039-Safari

APPLE-149039-WebKitCanvas

First published (updated )
Advisory
APPLE-149039-WebKitCanvas

APPLE-149039-WebKit

First published (updated )
Advisory
APPLE-149039-WebKit

Apple SafariZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

Risk 85

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-64715.

First published (updated )
ZDI-CAN-32069

Apple SafariApple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

Risk 85

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-64715.

First published (updated )
Advisory
ZDI-26-610

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

First published (updated )
REDHAT-BUG-2520320

Apple Safari15 vulnerabilities

Risk 37
First published (updated )
Advisory
APPLE-148286

APPLE-148286-WebKit

First published (updated )
Advisory
APPLE-148286-WebKit

Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 153
Source: MITRE
First published (updated )
CVE-2026-65334

Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 148
Source: Apple
First published (updated )
CVE-2026-64784

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65331

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65335

Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65332

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65333

Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65337

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65336

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-65340

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free

Risk 22
Severity
4.3
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Null Pointer Dereference, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-64781

Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 17
Severity
3.1
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 152
Source: MITRE
First published (updated )
CVE-2026-64782

Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal

Risk 34
Severity
5.4
Race Condition, Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 160
Source: Apple
First published (updated )
CVE-2026-65341

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Double Free, Null Pointer Dereference, Path Traversal

Risk 37
Severity
6.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition, Double Free, Null Pointer Dereference, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 161
Source: MITRE
First published (updated )
CVE-2026-64715

Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free

Risk 22
Severity
4.3
Use After Free, Race Condition, Input Validation, Null Pointer Dereference, Buffer Overflow, Integer Overflow, Double Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 153
Source: Apple
First published (updated )
CVE-2026-64780

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203