CVE-2026-65391

high

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

References

https://support.apple.com/en-us/149038

https://support.apple.com/en-us/149037

https://support.apple.com/en-us/149036

https://support.apple.com/en-us/148286

https://support.apple.com/en-us/148282

https://support.apple.com/en-us/148281

Details

Source: Mitre, NVD

Published: 2026-09-14

Updated: 2026-09-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00168