Product:
Safari
Summary
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28946 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by Safari, triggers the use-after-free condition. This can lead to a crash of the browser, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- macOS Tahoe 26.5 – Fixed the use-after-free issue in Safari.
Mitigation
Users are advised to update to macOS Tahoe 26.5 to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and improve overall security.