Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple SafariZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

Risk 85

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-64715.

First published (updated )
ZDI-CAN-32069

Apple SafariApple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

Risk 85

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-64715.

First published (updated )
Advisory
ZDI-26-610

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

First published (updated )
REDHAT-BUG-2520320

Apple Safari22 vulnerabilities

Risk 37
First published (updated )
Advisory
APPLE-148286

APPLE-148286-WebKit

First published (updated )
Advisory
APPLE-148286-WebKit

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 77
Source: NVD
First published (updated )
CVE-2026-65334

Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 74
Source: Apple
First published (updated )
CVE-2026-64784

Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65331

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65335

Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65332

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65333

Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65337

Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65336

Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65340

Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition

Risk 22
Severity
4.3
Input Validation, Use After Free, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-64781

Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 17
Severity
3.1
Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 77
Source: NVD
First published (updated )
CVE-2026-64782

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 34
Severity
5.4
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-65341

Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition

Risk 37
Severity
6.5
Use After Free, Input Validation, Integer Overflow, Buffer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 77
Source: NVD
First published (updated )
CVE-2026-64715

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 77
Source: Apple
First published (updated )
CVE-2026-64780

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 77
Severity
8.8
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 78
Source: NVD
First published (updated )
CVE-2026-43794

Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Infoleak

Risk 37
Severity
6.5
Input Validation, Integer Overflow, Use After Free, Buffer Overflow, Race Condition, Infoleak
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 83
Source: Apple
First published (updated )
CVE-2026-64778

Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow

Risk 17
Severity
3.1
Race Condition, Use After Free, Input Validation, Integer Overflow, Buffer Overflow
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 85
Source: NVD
First published (updated )
CVE-2026-64779

Use After Free, Input Validation, Integer Overflow

Risk 40
Severity
6.5
Trending
Month
Use After Free, Input Validation, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 18
Source: NVD
First published (updated )
CVE-2026-64787

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 70
Source: Apple
First published (updated )
CVE-2026-43795

Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 22
Severity
4.3
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accessibility. This issue was addressed through improved state management.

1 / 70
Source: Apple
First published (updated )
CVE-2026-65338

Input Validation, Integer Overflow, Use After Free

Risk 22
Severity
4.3
Input Validation, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Audio. A logic issue was addressed with improved checks.

1 / 14
Source: Apple
First published (updated )
CVE-2026-65351

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 62
Severity
8.1
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. This issue was addressed through improved state management.

1 / 135
Source: Apple
First published (updated )
CVE-2026-64713

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 39
Severity
6.5
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Accessibility. This issue was addressed through improved state management.

1 / 137
Source: Apple
First published (updated )
CVE-2026-64730

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 37
Severity
6.5
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 160
Source: Apple
First published (updated )
CVE-2026-43821

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 81
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 140
Source: MITRE
First published (updated )
CVE-2026-64783

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203