Product:
Safari
Summary
The issue was addressed with improved memory handling. A malicious website may be able to process restricted web content outside the sandbox. This vulnerability affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-28859 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious website designed to bypass the sandbox restrictions. When a user visits this site using the affected version of Safari, the attacker could potentially access restricted web content, leading to unauthorized data exposure.
Affected Products
- Safari: A web browser that may allow malicious websites to process restricted content.
- iOS: The mobile operating system affected by this vulnerability.
- iPadOS: The operating system for iPads that is also impacted.
- macOS Tahoe: The desktop operating system with the same vulnerability.
- tvOS: The operating system for Apple TV that is affected.
- visionOS: The operating system for visionOS devices that is impacted.
- watchOS: The operating system for Apple Watch that is also vulnerable.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of Safari and the respective operating systems. Regularly applying updates can help protect against known vulnerabilities and improve overall security.