Product:
Safari
Summary
A use-after-free issue was addressed with improved memory management. This issue may lead to an unexpected crash when processing maliciously crafted web content. The vulnerability affects multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28942 |
Exploitation
To exploit this vulnerability, an attacker can craft malicious web content that, when processed by Safari, triggers the use-after-free condition. This can lead to a crash of the Safari browser, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- iOS 26.5: Affected by the use-after-free issue in Safari.
- iPadOS 26.5: Vulnerable to the same issue as iOS.
- macOS Tahoe 26.5: Safari may crash due to this vulnerability.
- tvOS 26.5: Safari is impacted by the use-after-free issue.
- visionOS 26.5: Vulnerable to the same issue in Safari.
- watchOS 26.5: Affected by the use-after-free issue in Safari.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Keeping software up to date is crucial in protecting against known vulnerabilities.