Description
This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Published: 2026-08-17
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw lies in Safari’s state management logic, allowing maliciously crafted web content to trigger an unexpected crash. The result is a denial‑of‑service condition that interrupts user activity and risks loss of unsaved data. The weakness is consistent with improper handling of internal state, akin to out‑of‑bounds memory writes.

Affected Systems

Apple devices running iOS 18.7.10 or earlier, iPadOS 18.7.10 or earlier, iOS 26.6.1 or earlier, iPadOS 26.6.1 or earlier, and macOS Tahoe 26.6.2 or earlier are affected until updated to the fixes listed above.

Risk and Exploitability

The vulnerability can be triggered simply by loading malicious web content; the attacker only needs to craft a URL or website. No EPSS score is available and the issue is not listed in CISA's KEV catalog. The impact is restricted to availability, producing a Safari crash with no privilege elevation or data compromise. Updating to the patched releases mitigates the risk.

Generated by OpenCVE AI on August 17, 2026 at 23:25 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the device operating system to a version that includes the Safari fix (iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2 or later).
  • If a system update is unavailable, limit browsing to trusted sites and consider disabling JavaScript in Safari to reduce the likelihood of a crash.
  • When updates or feature restrictions cannot be applied, use an alternate browser that is not affected by this defect as a temporary workaround.

Generated by OpenCVE AI on August 17, 2026 at 23:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 23:45:00 +0000

Type Values Removed Values Added
Title Safari Crash via Malicious Web Content due to Improper State Management in Apple iOS, iPadOS, and macOS
Weaknesses CWE-400
CWE-787

Mon, 17 Aug 2026 23:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References

Subscriptions

Apple Ios And Ipados Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-17T21:30:49.391Z

Reserved: 2026-07-22T00:45:26.179Z

Link: CVE-2026-65336

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-17T22:17:24.547

Modified: 2026-08-17T22:17:24.547

Link: CVE-2026-65336

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T23:30:04Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-787

    Out-of-bounds Write