The vulnerability exists in Safari’s handling of web content and can be triggered by a maliciously crafted page, causing the browser to crash unexpectedly. Based on the description, it is inferred that the crash results in a denial of service on the affected device, interrupting user activity and potentially disrupting access to web‑based services. No evidence of confidentiality or integrity compromise is reported.

The affected products are Apple iOS, iPadOS, and macOS (Tahoe). Devices running iOS 18.7.10 or iOS 26.6.1, iPadOS 18.7.10 or iPadOS 26.6.1, or macOS Tahoe 26.6.2 have the issue fixed; any earlier version is impacted.

No EPSS or KEV data is available, and a CVSS score has not been disclosed. Based on the description, it is inferred that the attack vector is client‑side via loading malicious web content in Safari, requiring no elevated privileges. Although the likelihood of widespread exploitation is uncertain due to lack of public metrics, the local denial of service could occur on any device exposed to such content, posing a risk to availability for users and organizations relying on Safari.