CVE-2026-64718

Published Jul 27, 2026 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, visionOS 27, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Analysis

Technical impact

A use‑after‑free vulnerability in Safari enables attackers to send malicious web content that causes the browser to dereference freed memory, leading to an unexpected crash. The issue is confined to the web rendering engine and does not grant attackers code execution or privilege escalation; it results in a denial‑of‑service by terminating the browser instance. The vulnerability is mitigated in Safari 26.6 and newer, iOS 26.6/26.7/27 and iPadOS 26.6/26.7/27, macOS Golden Gate 27 and Tahoe 26.6, tvOS 26.6, visionOS 26.6/27, and watchOS 26.6.

Affected Systems

Apple Safari, iOS, iPadOS, Apple macOS, tvOS, visionOS, and watchOS. Versions before 26.6 of each product are affected; the issue is iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Risk and Exploitability

The vulnerability is not publicly associated with a known exploit and is not listed in CISA’s KEV catalog. The CVSS score of 5.5 indicates moderate severity. The EPSS score of <1% indicates a very low but nonzero exploitation probability web content to a user’s Safari session;. The impact is limited to a denial‑of‑service by crashing the browser.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

Safari

affected

Version	Status	Constraints
`0`	affected	< 26.6
`0`	affected	< 27

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 26.6
`0`	affected	< 26.7
`0`	affected	< 27

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 26.6
`0`	affected	< 27

Apple

tvOS

affected

Version	Status	Constraints
`0`	affected	< 26.6

Apple

visionOS

affected

Version	Status	Constraints
`0`	affected	< 26.6
`0`	affected	< 27

Apple

watchOS

affected

Version	Status	Constraints
`0`	affected	< 26.6

Configuration 1 [-]

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

No data.

Vendor Product Versions

Apple

Ios And Ipados

Version	Status	Scheme	Platform
`[0,26.6)`	affected	generic	—

Apple

Macos

Version	Status	Scheme	Platform
`[0,26.6)`	affected	generic	—

Apple

Safari

Version	Status	Scheme	Platform
`[0,26.6)`	affected	generic	—

Apple

Tvos

Version	Status	Scheme	Platform
`[0,26.6)`	affected	generic	—

Apple

Visionos

Version	Status	Scheme	Platform
`[0,26.6)`	affected	generic	—

Apple

Watchos

Version	Status	Scheme	Platform
`[0,26.6)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Install Safari 26.6 or later, or update iOS 26.6 and iPadOS 26.6
Install macOS Tahoe 26.6 and update tvOS, visionOS, and watchOS to 26.6 or later
Ensure devices run the latest operating system and app updates to maintain the patch

Generated by OpenCVE AI on September 21, 2026 at 06:44 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.261% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/128073
https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149039
https://support.apple.com/en-us/149041

History

Oct 27, 2026 4:30 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 21, 2026 7:00 AM Title updated View changes

Type	Values Removed	Values Added
Title	Use‑After‑Free Leading to Safari Crash via Malicious Web Content

Sep 14, 2026 9:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, visionOS 27, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References		https://support.apple.com/en-us/149034 https://support.apple.com/en-us/149035 https://support.apple.com/en-us/149038 https://support.apple.com/en-us/149039 https://support.apple.com/en-us/149041

Aug 5, 2026 12:30 AM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Use‑After‑Free Leading to Safari Crash via Malicious Web Content
Weaknesses		CWE-416

Aug 4, 2026 2:00 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title	Use‑After‑Free Crash in Safari and Apple Web Browsers
Weaknesses	CWE-416

Jul 28, 2026 4:15 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Use‑After‑Free Crash in Safari and Apple Web Browsers
Weaknesses		CWE-416

Jul 28, 2026 3:30 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios And Ipados Apple macos Apple safari Apple tvos Apple visionos Apple watchos
Vendors & Products		Apple Apple ios And Ipados Apple macos Apple safari Apple tvos Apple visionos Apple watchos

Jul 27, 2026 8:30 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References		https://support.apple.com/en-us/128066 https://support.apple.com/en-us/128067 https://support.apple.com/en-us/128068 https://support.apple.com/en-us/128069 https://support.apple.com/en-us/128070 https://support.apple.com/en-us/128073