A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A memory corruption issue was addressed with improved state management. This issue is fixed in Safari     26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing     maliciously crafted web content may lead to an unexpected Safari crash. (CVE-2026-65334)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of Apple iOS running on the mobile device is prior to 26.6.1. It is, therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.6.2. It is, therefore, affected by multiple vulnerabilities:

  - An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and     iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.
    (CVE-2026-65346)

  - A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari     26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing     maliciously crafted web content may lead to memory corruption. (CVE-2026-43794)

  - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10     and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web     content may lead to an unexpected Safari crash. (CVE-2026-43795, CVE-2026-65338)

  - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing     maliciously crafted web content may lead to an unexpected process crash. (CVE-2026-64715)

  - The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS     18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Visiting a maliciously crafted website may leak     sensitive data. (CVE-2026-64778)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 18.7.10. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Type	Severity
340769	Linux Distros Unpatched Vulnerability : CVE-2026-65334	Nessus	Misc.	Local	medium
335969	Apple iOS < 26.6.1 Multiple Vulnerabilities (148282)	Nessus	Mobile Devices	Local	high
335968	macOS 26.x < 26.6.2 Multiple Vulnerabilities (148281)	Nessus	MacOS X Local Security Checks	Local	high
335967	Apple iOS < 18.7.10 Multiple Vulnerabilities (148287)	Nessus	Mobile Devices	Local	critical

Detections

Analytics

CVE-2026-65334

medium

Tenable Plugins

medium

high

high

critical