Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Published: 2026-07-27
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free vulnerability in Safari’s memory management can cause an unexpected crash when processing maliciously crafted web content. The flaw is identified as CWE‑416 and results in an application crash, which denies service to the user but does not lead to remote code execution or data exposure.

Affected Systems

Apple Safari on macOS, iOS, and iPadOS; VisionOS; watchOS; all versions prior to 26.6 are vulnerable. The fix is delivered in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6.

Risk and Exploitability

The CVSS score is 8.8, indicating a high severity. However, the EPSS score is below 1%, and the vulnerability is not listed in the CISA KEV catalog, suggesting a low current exploitation probability. The likely attack vector is a malicious website or web page accessed by a user, which could trigger the crash. No evidence indicates that the flaw can be leveraged for further compromise; thus the threat is mainly a denial‑of‑service.

Generated by OpenCVE AI on August 3, 2026 at 15:45 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Safari to version 26.6 or newer on all devices.
  • Apply the latest OS updates: iOS 26.6, iPadOS 26.6, macOS 26.6, visionOS 26.6, and watchOS 26.6.
  • Keep the system regularly updated and avoid visiting untrusted or suspicious websites to reduce the chance of triggering the crash.

Generated by OpenCVE AI on August 3, 2026 at 15:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 16:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free Issue in Safari Causing Unexpected Crash

Thu, 30 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free Issue in Safari Causing Unexpected Crash

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 04:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple safari
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple safari
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Safari Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T15:00:38.071Z

Reserved: 2026-07-20T18:11:03.397Z

Link: CVE-2026-64783

cve-icon Vulnrichment

Updated: 2026-07-28T15:00:32.938Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:15.720

Modified: 2026-07-28T18:35:42.410

Link: CVE-2026-64783

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T16:00:07Z

Weaknesses