Product:
iOS, iPadOS, Safari, macOS Tahoe, visionOS
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. This vulnerability affects multiple Apple products and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20636 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected Apple products, can lead to a crash of the application. User interaction is required, as the user must visit a specially crafted website to trigger the vulnerability.
Affected Products
- iOS: Affected by memory handling issues leading to potential crashes.
- iPadOS: Similar vulnerabilities as iOS, fixed in the latest version.
- Safari: Vulnerable to crashes from malicious web content.
- macOS Tahoe: Affected by the same memory handling issues.
- visionOS: Also impacted by this vulnerability.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, Safari, macOS Tahoe, and visionOS. Regular updates help protect against known vulnerabilities and improve overall security.