Medium severity6.5NVD Advisory· Published Aug 17, 2026· Updated Sep 14, 2026
CVE-2026-64787
CVE-2026-64787
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <26.6.1
- (no CPE)range: =26.6.1
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.6.1
- (no CPE)range: =18.7.10
- Range: =27
- Range: =27
- Range: =27
- Range: =26.6.2
- Range: =18.7.10
- osv-coords4 versionspkg:rpm/almalinux/webkit2gtk3pkg:rpm/almalinux/webkit2gtk3-develpkg:rpm/almalinux/webkit2gtk3-jscpkg:rpm/almalinux/webkit2gtk3-jsc-devel
< 2.54.0-1.el9_8+ 3 more
- (no CPE)range: < 2.54.0-1.el9_8
- (no CPE)range: < 2.54.0-1.el9_8
- (no CPE)range: < 2.54.0-1.el9_8
- (no CPE)range: < 2.54.0-1.el9_8
Patches
Vulnerability mechanics
References
7- support.apple.com/en-us/148281nvdRelease NotesVendor Advisory
- support.apple.com/en-us/148282nvdRelease NotesVendor Advisory
- support.apple.com/en-us/148286nvdRelease NotesVendor Advisory
- support.apple.com/en-us/148287nvd
- support.apple.com/en-us/149036nvd
- support.apple.com/en-us/149037nvd
- support.apple.com/en-us/149038nvd
News mentions
4- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026
- Apple Fixes 28 Security Vulnerabilities Across macOS, iOS, and iPadOSCyber Security News · Aug 18, 2026
- Apple iOS: 25 Vulnerabilities Patched in Same-Day Disclosure BatchVypr Intelligence · Aug 17, 2026
- Apple Patches iOS and macOS, (Mon, Aug 17th)SANS Internet Storm Center · Aug 17, 2026