CVE-2026-28947 - Vulnerability Analysis

Overview

Apple iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5 contain a use-after-free vulnerability caused by improper memory management in Safari, letting attackers cause a crash via malicious web content, exploit requires crafted web content.

Severity & Score

Impact

Attackers can cause Safari to crash, leading to denial of service.

Mitigation

Update to version 26.5 or later.

References

• https://support.apple.com/en-us/127115
• https://support.apple.com/en-us/127118
• https://support.apple.com/en-us/127119
• https://support.apple.com/en-us/127120
• https://support.apple.com/en-us/127110

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner