CVE-2026-64715

Опубликовано: 17 авг. 2026

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.

Ссылки

https://support.apple.com/en-us/148281
Release Notes
Vendor Advisory
https://support.apple.com/en-us/148282
Release Notes
Vendor Advisory
https://support.apple.com/en-us/148286
Release Notes
Vendor Advisory
https://support.apple.com/en-us/148287
Release Notes
Vendor Advisory
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 26.6.1 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.7.10 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.6.1 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.7.10 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.6.1 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.6.2 (исключая)

EPSS

Процентиль: 31%

0.00393

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-64715

CVSS3: 8.8

redhat

около 1 месяца назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.

GHSA-f338-c843-j6jp

CVSS3: 6.5

github

около 1 месяца назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash.

ELSA-2026-69098

oracle-oval

5 дней назад

ELSA-2026-69098: webkit2gtk3 security update (IMPORTANT)

RLSA-2026:69098

rocky

3 дня назад

Important: webkit2gtk3 security update