CVE-2026-28953

Опубликовано: 11 мая 2026

Источник: nvd

CVSS3: 7.5

CVSS3: 8.8

EPSS Низкий

Описание

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

Ссылки

https://support.apple.com/en-us/127110
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127111
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127115
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127118
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127119
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127120
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127121
https://access.redhat.com/errata/RHSA-2026:25918
https://access.redhat.com/errata/RHSA-2026:25927
https://access.redhat.com/errata/RHSA-2026:27728
https://access.redhat.com/errata/RHSA-2026:27785
https://access.redhat.com/errata/RHSA-2026:27804
https://access.redhat.com/errata/RHSA-2026:28114
https://access.redhat.com/errata/RHSA-2026:28146
https://access.redhat.com/errata/RHSA-2026:28147
https://access.redhat.com/errata/RHSA-2026:28148
https://access.redhat.com/security/cve/CVE-2026-28953
https://bugzilla.redhat.com/show_bug.cgi?id=2483965
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28953.json

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.7.9 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.7.9 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 26.5 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 26.5 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 26.5 (исключая)

EPSS

Процентиль: 34%

0.00411

Низкий

7.5 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-119

CWE-120

Связанные уязвимости

CVE-2026-28953

CVSS3: 8.8

redhat

2 месяца назад

CVE-2026-28953

CVSS3: 7.5

debian

3 месяца назад

The issue was addressed with improved memory handling. This issue is f ...

GHSA-53qj-jrj4-cjhh

CVSS3: 7.5

github

3 месяца назад

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

openSUSE-SU-2026:21129-1

suse-cvrf

около 1 месяца назад

Security update for webkit2gtk3

SUSE-SU-2026:2623-1

suse-cvrf

около 1 месяца назад

Security update for webkit2gtk3

EPSS

Процентиль: 34%

0.00411

Низкий

7.5 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-119

CWE-120