Description
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Published: 2026-08-17
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability causes Safari to crash when processing maliciously crafted web content. The crash results in a denial of service for the user, interrupting browsing sessions. It represents an improper handling of input during rendering, a weakness classified under CWE-676 and CWE-682.

Affected Systems

Apple iOS, iPadOS, and macOS are affected. The fix is included in iOS 18.7.10 and 26.6.1, iPadOS 18.7.10 and 26.6.1, and macOS Tahoe 26.6.2.

Risk and Exploitability

An attacker can exploit this vulnerability by delivering crafted content over the internet, triggering a crash on the victim’s Safari browser. The EPSS score is not available, and the vulnerability is not in the CISA KEV catalog. While no CVSS score is provided, the impact of a denial of service across Apple devices makes the risk moderate to high for end‑users.

Generated by OpenCVE AI on August 17, 2026 at 23:22 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest iOS update (18.7.10 or 26.6.1) or iPadOS update (18.7.10 or 26.6.1) on affected devices.
  • Upgrade macOS to Tahoe 26.6.2 to apply the Safari crash fix.
  • Restart Safari or the device if a crash occurs to restore functionality.

Generated by OpenCVE AI on August 17, 2026 at 23:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 23:45:00 +0000

Type Values Removed Values Added
Title Safari Web Content Crash Leading to Denial of Service
Weaknesses CWE-676
CWE-682

Mon, 17 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References

Subscriptions

Apple Ios And Ipados Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-17T21:31:37.955Z

Reserved: 2026-07-22T00:45:02.635Z

Link: CVE-2026-65331

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-17T22:17:24.040

Modified: 2026-08-17T22:17:24.040

Link: CVE-2026-65331

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T23:30:04Z

Weaknesses
  • CWE-676

    Use of Potentially Dangerous Function

  • CWE-682

    Incorrect Calculation