CVE-2026-28946

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

https://support.apple.com/en-us/127121

https://support.apple.com/en-us/127115

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28946.json

https://bugzilla.redhat.com/show_bug.cgi?id=2471790

https://access.redhat.com/security/cve/CVE-2026-28946

https://access.redhat.com/errata/RHSA-2026:28148

https://access.redhat.com/errata/RHSA-2026:28147

https://access.redhat.com/errata/RHSA-2026:28146

https://access.redhat.com/errata/RHSA-2026:28114

https://access.redhat.com/errata/RHSA-2026:27804

https://access.redhat.com/errata/RHSA-2026:27785

https://access.redhat.com/errata/RHSA-2026:27728

https://access.redhat.com/errata/RHSA-2026:25927

https://access.redhat.com/errata/RHSA-2026:25918

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS