Product:
Safari
Summary
A use-after-free issue was addressed with improved memory management. This issue may lead to an unexpected Safari crash when processing maliciously crafted web content. The vulnerability has been fixed in several Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-28947 |
Exploitation
To exploit this vulnerability, an attacker could craft malicious web content that, when processed by Safari, triggers the use-after-free condition. This could lead to a crash of the Safari browser, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- iOS 26.5 – Affected by the use-after-free issue in Safari.
- iPadOS 26.5 – Vulnerable to the same issue as iOS.
- macOS Tahoe 26.5 – Contains the vulnerability in Safari.
- tvOS 26.5 – Affected by the use-after-free issue.
- visionOS 26.5 – Vulnerable to the same issue.
- watchOS 26.5 – Contains the vulnerability in Safari.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS where the issue has been addressed. Regularly updating software can help protect against known vulnerabilities.