Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
Published: 2026-06-29
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw in Apple’s web browsers and extensions. Apple has addressed it with improved memory management, and the issue is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6. A malicious web extension could trigger a process crash by exploiting the flaw. The impact is a denial of service for the user, with no known code execution or data exfiltration.

Affected Systems

Apple Safari on macOS, as well as the iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS platforms are affected. Versions prior to 26.5.2 of Safari, iOS, iPadOS, macOS Tahoe, tvOS 26.6, visionOS 26.6, and watchOS 26.6 contain the vulnerability. The issue is fixed in the respective 26.5.2 or 26.6 updates.

Risk and Exploitability

Given the EPSS score of 0.00382 (< 1 %), the vulnerability has a very low predicted exploitation probability, and it is not listed in CISA's KEV catalog, indicating no known active exploitation at the time of this report. The flaw can be exploited by any malicious web extension, which is a common vector for browser attacks. The CVSS score of 5.3 indicates moderate severity; the crash still undermines availability and user trust.

Generated by OpenCVE AI on August 3, 2026 at 07:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest version of Safari, iOS, iPadOS, macOS, tvOS, visionOS, or watchOS that includes the 26.5.2 or 26.6 security update or later.
  • Remove or disable any web extensions that are untrusted or no longer needed to reduce the attack surface.
  • Monitor Apple support and security advisory updates for any additional patches or recommendations.

Generated by OpenCVE AI on August 3, 2026 at 07:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free Leading to Unexpected Browser Crash in Safari and Apple Platforms

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious web extension may be able to cause an unexpected process crash. A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
References

Tue, 30 Jun 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple safari
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple safari

Tue, 30 Jun 2026 00:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free Vulnerability in Apple Web Browsers Allowing Malicious Extensions to Crash the Browser Process

Mon, 29 Jun 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 29 Jun 2026 21:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free Vulnerability in Apple Web Browsers Allowing Malicious Extensions to Crash the Browser Process
Weaknesses CWE-416

Mon, 29 Jun 2026 20:15:00 +0000

Type Values Removed Values Added
Description A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious web extension may be able to cause an unexpected process crash.
References

Subscriptions

Apple Ios And Ipados Macos Safari
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-27T20:13:10.824Z

Reserved: 2026-05-01T22:46:21.643Z

Link: CVE-2026-43704

cve-icon Vulnrichment

Updated: 2026-06-29T21:43:54.593Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T07:15:04Z

Weaknesses