Description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
Published: 2026-08-17
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises from insufficient memory handling when a browser parses maliciously crafted web content on Apple devices. The flaw can result in memory corruption, which may destabilize the system or enable more severe exploitation. Apple has addressed the issue with improved memory handling, and the vulnerability is fixed in Safari 26.6.1, iOS 18.7.10 and 26.6.1, iPadOS 18.7.10 and 26.6.1, and macOS Tahoe 26.6.2.

Affected Systems

Affected devices include all versions of Safari, iOS, iPadOS, and macOS prior to the patched releases listed above. Apple hardware running these operating systems or browsers is susceptible.

Risk and Exploitability

The CVSS score of 5.4 indicates moderate severity. The EPSS score is less than 1%, implying a low likelihood of exploitation. The vulnerability is not catalogued in CISA KEV. Attackers would need to supply crafted web content to a user’s browser; if successful, the resulting memory corruption could cause application crashes or more advanced attacks if further leveraged.

Generated by OpenCVE AI on August 27, 2026 at 02:12 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Apple iOS, iPadOS, or macOS Tahoe to the latest patched release (iOS 18.7.10 or 26.6.1, iPadOS 18.7.10 or 26.6.1, macOS Tahoe 26.6.2).
  • Limit exposure of untrusted web content by enabling web content filtering or blocking.
  • If the patch is not currently available, consider disabling or restricting web browser functionality that processes external content until a fix is deployed.

Generated by OpenCVE AI on August 27, 2026 at 02:12 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Title Memory Corruption Vulnerability in Safari and Apple Web Rendering webkitgtk: Processing maliciously crafted web content may lead to memory corruption
Weaknesses CWE-120
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 18 Aug 2026 20:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption Vulnerability in Safari and Apple Web Rendering

Tue, 18 Aug 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
Apple safari
CPEs cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os
Apple safari

Tue, 18 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 18 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
Title Memory Corruption via Malicious Web Content in Apple Operating Systems
Weaknesses CWE-122
CWE-787
References

Tue, 18 Aug 2026 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-416
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'}

Tue, 18 Aug 2026 00:30:00 +0000

Type Values Removed Values Added
Title Memory Corruption via Malicious Web Content in Apple Operating Systems
Weaknesses CWE-122
CWE-787

Mon, 17 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Safari
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-18T17:59:31.875Z

Reserved: 2026-07-22T00:45:26.179Z

Link: CVE-2026-65341

cve-icon Vulnrichment

Updated: 2026-08-18T13:33:03.239Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-17T22:17:25.103

Modified: 2026-08-18T18:38:19.287

Link: CVE-2026-65341

cve-icon Redhat

Severity : Important

Publid Date: 2026-08-17T21:30:42Z

Links: CVE-2026-65341 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-27T02:15:04Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-416

    Use After Free