Apple Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Safari.

Products

Clear product

Showing 25 vulnerabilities on this page for Safari

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Apple Safari, iOS, iPadOS, macOS, visionOS, and watchOS Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-416Jul 27, 2026
CVSS8.8v3.1EPSS0.208%PoCs0SignalsSTIX

Apple Safari Memory Corruption Vulnerability

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-119Jul 27, 2026
CVSS8.8v3.1EPSS0.214%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, and visionOS Uncontrolled Resource Consumption via Website

This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may lead to an app denial-of-service.

CWE-400Jul 27, 2026
CVSS6.5v3.1EPSS0.304%PoCs0SignalsSTIX

Apple Safari and macOS Authorization Bypass Leading to Sensitive User Data Access

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data.

CWE-285Jul 27, 2026
CVSS6.5v3.1EPSS0.249%PoCs0SignalsSTIX

Apple Safari UI Spoofing via Maliciously Crafted Web Content

The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.

CWE-451Jul 27, 2026
CVSS6.5v3.1EPSS0.34%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Sandbox File Read via Access Issue

An access issue was addressed with improved access restrictions. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read files outside of its sandbox.

CWE-284Jul 27, 2026
CVSS6.5v3.1EPSS0.31%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Observable Discrepancy in Link Visitation

This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.

CWE-203Jul 27, 2026
CVSS8.1v3.1EPSS0.328%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS iframe Sandboxing Policy Violation

A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.

CWE-693Jul 27, 2026
CVSS6.5v3.1EPSS0.262%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Out-of-Bounds Access Vulnerability

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-125Jul 27, 2026
CVSS8.1v3.1EPSS0.285%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-416Jul 27, 2026
CVSS5.5v3.1EPSS0.107%PoCs0SignalsSTIX

WebKit WebGPU importExternalTexture Cross-Origin Information Disclosure

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.

CWE-346Jun 29, 2026
CVSS6.5v3.1EPSS0.239%PoCs1SignalsSTIX

Apple Safari, iOS, iPadOS, and macOS Memory Handling Vulnerability Leading to Crash

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-119CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.598%PoCs0SignalsSTIX

Apple Safari Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.544%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Clipboard Data Hijacking via Malicious Website

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to silently hijack clipboard data.

CWE-732Jun 29, 2026
CVSS6.5v3.1EPSS0.437%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Memory Handling Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CWE-119CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.244%PoCs0SignalsSTIX

Apple Safari Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.221%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Memory Handling Information Disclosure

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may result in the disclosure of process memory.

CWE-119CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.362%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Sandbox Escape via Malicious Website

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.

CWE-284Jun 29, 2026
CVSS7.1v3.1EPSS0.5%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Memory Handling Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CWE-119CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.244%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.238%PoCs0SignalsSTIX

Safari Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.315%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Memory Corruption Vulnerability

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CWE-119Jun 29, 2026
CVSS6.5v3.1EPSS0.686%PoCs0SignalsSTIX

Apple Safari Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-416Jun 29, 2026
CVSS6.5v3.1EPSS0.326%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS Use-After-Free Vulnerability

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.

CWE-416Jun 29, 2026
CVSS8.8v3.1EPSS0.256%PoCs0SignalsSTIX

Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS Path Traversal Information Disclosure

A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.

CWE-22Jun 29, 2026
CVSS6.5v3.1EPSS0.436%PoCs0SignalsSTIX