AppleCVE-2026-65341

Apple Safari: memory corruption

Medium5.4CVE-2026-65341 · Published Aug 17, 2026 · updated Sep 14, 2026

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

Apple advisory

Affected versions

Package	Affected	Fixed in
Safari Product	< 26.6.1	26.6.1
iOS and iPadOS Product	< 18.7.10	18.7.10
	< 26.6.1	26.6.1
macOS Product	< 26.6.2	26.6.2
tvOS Product	< 27	27
visionOS Product	< 27	27
watchOS Product	< 27	27

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from: CISA (its enrichment of the CVE record)
Weakness: CWE-119, CWE-416

More Apple advisories

All Apple

Date	Advisory	Severity	Fixed in
Aug 17	Apple iOS and iPadOS: use after free High7.5Aug 17 CVE-2026-6534326.6.1+2 more	High7.5	26.6.1+2 more
Aug 17	Apple iOS and iPadOS: integer overflow High8.8Aug 17 CVE-2026-6534626.6.1+3 more	High8.8	26.6.1+3 more
Aug 17	Apple iOS and iPadOS: denial of service Medium6.5Aug 17 CVE-2026-6534726.6.1+2 more	Medium6.5	26.6.1+2 more
Aug 17	Apple iOS and iPadOS: out-of-bounds read Medium6.6Aug 17 CVE-2026-6534926.6.1+3 more	Medium6.6	26.6.1+3 more
Aug 17	Apple Safari: unhandled exceptional condition Medium4.3Aug 17 CVE-2026-6535126.6.1+3 more	Medium4.3	26.6.1+3 more
Aug 17	Apple Safari: unhandled exceptional condition Medium4.3Aug 17 CVE-2026-6533126.6.1+3 more	Medium4.3	26.6.1+3 more

Affected versions

More Apple advisories

Critical advisories by email