Description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
Published: 2026-08-17
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Memory Corruption
Action: Patch
AI Analysis

Impact

The vulnerability is caused by a flaw in memory handling when parsing maliciously crafted web content. The result is memory corruption that can crash the browser or enable more advanced exploits. Apple has addressed the issue with improved memory management; the fix is in Safari 26.6.1, iOS 18.7.10 and 26.6.1, iPadOS 18.7.10 and 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. Until these patches are applied, the flaw remains in all affected Apple devices.

Affected Systems

Affected devices include all versions of Safari, iOS, iPadOS, and macOS prior to the patched releases listed above. Apple hardware running these operating systems or browsers is susceptible.

Risk and Exploitability

The CVSS score of 5.4 indicates moderate severity. The EPSS score is less than 1%. Attackers would need to supply crafted web content to a user’s browser; if successful, the resulting memory corruption could cause application crashes or more advanced attacks if further leveraged.

Generated by OpenCVE AI on September 21, 2026 at 06:18 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Apple iOS, iPadOS, or macOS Tahoe to the latest patched release (iOS 18.7.10 or 26.6.1, iPadOS 18.7.10 or 26.6.1, macOS Tahoe 26.6.2).
  • Limit exposure of untrusted web content by enabling web content filtering or blocking.
  • If the patch is not currently available, consider disabling or restricting web browser functionality that processes external content until a fix is deployed.

Generated by OpenCVE AI on September 21, 2026 at 06:18 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
References

Thu, 27 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Title Memory Corruption Vulnerability in Safari and Apple Web Rendering webkitgtk: Processing maliciously crafted web content may lead to memory corruption
Weaknesses CWE-120
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 18 Aug 2026 20:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption Vulnerability in Safari and Apple Web Rendering

Tue, 18 Aug 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
Apple safari
CPEs cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os
Apple safari

Tue, 18 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 18 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
Title Memory Corruption via Malicious Web Content in Apple Operating Systems
Weaknesses CWE-122
CWE-787
References

Tue, 18 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-416
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'}

Tue, 18 Aug 2026 00:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption via Malicious Web Content in Apple Operating Systems
Weaknesses CWE-122
CWE-787

Mon, 17 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Safari
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-14T20:49:49.151Z

Reserved: 2026-07-22T00:45:26.179Z

Link: CVE-2026-65341

cve-icon Vulnrichment

Updated: 2026-08-18T13:33:03.239Z

cve-icon NVD

Status : Modified

Published: 2026-08-17T22:17:25.103

Modified: 2026-09-14T21:17:18.880

Link: CVE-2026-65341

cve-icon Redhat

Severity : Important

Publid Date: 2026-08-17T21:30:42Z

Links: CVE-2026-65341 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T06:30:09Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-416

    Use After Free