Product:
macOS, iOS, iPadOS, visionOS, Safari
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. This issue is fixed in the latest versions of macOS, iOS, iPadOS, visionOS, and Safari.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-20644 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected software, can cause an unexpected crash of the process. This requires user interaction, as the user must visit a specially crafted website or open a malicious file.
Affected Products
- macOS Tahoe
- iOS 18.7.5
- iPadOS 18.7.5
- visionOS 26.3
- Safari 26.3
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of macOS, iOS, iPadOS, visionOS, and Safari as soon as possible. Regularly applying updates helps protect against known vulnerabilities.