Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination.

First published (updated )
REDHAT-BUG-2520320

Apple iOSBuffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition

Risk 77
Severity
8.8
Buffer Overflow, Use After Free, Input Validation, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.

1 / 78
Source: NVD
First published (updated )
CVE-2026-43794

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 62
Severity
8.1
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. This issue was addressed through improved state management.

1 / 135
Source: Apple
First published (updated )
CVE-2026-64713

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 81
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 140
Source: MITRE
First published (updated )
CVE-2026-64783

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 81
Severity
8.8
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 150
Source: MITRE
First published (updated )
CVE-2026-64757

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 62
Severity
8.1
Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 165
Source: Apple
First published (updated )
CVE-2026-64719

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 77
Severity
8.8
Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks.

Impact: maliciously crafted web content may lead to memory corruption

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=314528

1 / 102
Source: Red Hat
First published (updated )
CVE-2026-43705

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 50
Severity
7.1
Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Accessibility. This issue was addressed through improved state management.

1 / 102
Source: Apple
First published (updated )
CVE-2026-43701

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, CSRF, Buffer Overflow, Integer Overflow

Risk 59
Severity
8.1
Double Free, Use After Free, Input Validation, Race Condition, CSRF, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accessibility. This issue was addressed through improved state management.

1 / 88
Source: Apple
First published (updated )
CVE-2026-43735

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 77
Severity
8.8
Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may lead to memory corruption

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=313577

1 / 76
Source: Red Hat
First published (updated )
CVE-2026-43715

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 77
Severity
8.8
Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may lead to memory corruption

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=314115

1 / 100
Source: Red Hat
First published (updated )
CVE-2026-43731

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 50
Severity
7.1
Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Accessibility. This issue was addressed through improved state management.

1 / 99
Source: Apple
First published (updated )
CVE-2026-43725

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 …

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

First published (updated )
REDHAT-BUG-2483968

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.…

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483966

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.…

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483965

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

First published (updated )
REDHAT-BUG-2483964

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

First published (updated )
REDHAT-BUG-2483963

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 …

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483961

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.…

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483960

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.…

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483959

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 …

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483958

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 …

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483957

Apple SafariUse After Free

Risk 33
Severity
7
Use After Free

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483956

Apple SafariThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.…

Risk 33
Severity
7

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

First published (updated )
REDHAT-BUG-2483955

Apple SafariApple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability

Risk 35
Severity
7.5
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WebCore style resolver in Web Inspector. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the browser process.

1 / 2
Source: ZDI
First published (updated )
Advisory
ZDI-26-312

Apple SafariZDI-26-312: Apple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability

Risk 35
Severity
7.5
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WebCore style resolver in Web Inspector. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the browser process.

1 / 2
Source: ZDI
First published (updated )
ZDI-CAN-28879

Apple SafariApple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 42
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of regular expression named groups. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

1 / 2
Source: ZDI
First published (updated )
Advisory
ZDI-26-313

Apple SafariZDI-26-313: Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability

Risk 42
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of regular expression named groups. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

1 / 2
Source: ZDI
First published (updated )
ZDI-CAN-29186

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 43
Severity
7.5
Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

1 / 73
Source: NVD
First published (updated )
CVE-2026-43660

Apple macOS TahoeInput Validation, Buffer Overflow, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow

Risk 59
Severity
8.1
Input Validation, Buffer Overflow, Race Condition, Use After Free, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Accelerate. An out-of-bounds read was addressed with improved bounds checking.

1 / 73
Source: Apple
First published (updated )
CVE-2026-28907

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203