AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-64778

Apple Safari: information disclosure

Apple

CVE-2026-64778 · Published Aug 17, 2026 · updated Sep 14, 2026

Medium6.5
Fix: upgrade to 26.6.1 or later (4 fixed versions below)
Apple advisory

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Visiting a maliciously crafted website may leak sensitive data.

Affected versions

PackageAffectedFixed in
Safari
Product
< 26.6.126.6.1
iOS and iPadOS
Product
< 18.7.1018.7.10
< 26.6.126.6.1
macOS
Product
< 26.6.226.6.2
tvOS
Product
< 2727
visionOS
Product
< 2727
watchOS
Product
< 2727
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-200

More Apple advisories

All Apple
Medium 5.4Aug 17Apple Safari: memory corruptionCVE-2026-65341fixed in 26.6.1 +3High 7.5Aug 17Apple iOS and iPadOS: use after freeCVE-2026-65343fixed in 26.6.1 +2High 8.8Aug 17Apple iOS and iPadOS: integer overflowCVE-2026-65346fixed in 26.6.1 +3Medium 6.5Aug 17Apple iOS and iPadOS: denial of serviceCVE-2026-65347fixed in 26.6.1 +2Medium 6.6Aug 17Apple iOS and iPadOS: out-of-bounds readCVE-2026-65349fixed in 26.6.1 +3Medium 4.3Aug 17Apple Safari: unhandled exceptional conditionCVE-2026-65351fixed in 26.6.1 +3