CVE-2026-64715

medium

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.

References

https://support.apple.com/en-us/149038

https://support.apple.com/en-us/149037

https://support.apple.com/en-us/149036

https://support.apple.com/en-us/148287

https://support.apple.com/en-us/148286

https://support.apple.com/en-us/148282

https://support.apple.com/en-us/148281

Details

Source: Mitre, NVD

Published: 2026-08-17

Updated: 2026-09-14

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00146