Processing maliciously crafted web content may lead to an unexpected Safari crash. This crash causes a denial of service, disrupting browsing and web‑based application use. It likely originates from inadequate state management within Safari’s rendering engine (inferred). The crash terminates the browser process but does not directly compromise data confidentiality or integrity. The effect is a loss of availability that could impair user productivity.

Apple iOS, iPadOS, and macOS Tahoe are affected. Versions earlier than iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 are not patched. The vulnerability is fixed in those versions and later releases.

No EPSS score is available. The vulnerability is not listed in the CISA KEV catalog. The CVSS score is unspecified. Based on the description, it is inferred that an attacker could embed crafted web pages in a site or email to trigger the crash, since Safari processes content from the Internet. The likelihood and potential impact remain uncertain until exploit activity is observed.