{"schema_version":"1","data":[{"id":45656,"advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","source_published_at":"2026-10-20T00:50:52.28+00:00","published_at":"2026-10-25T12:37:09.448923+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-86922"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42252,"advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","source_published_at":"2026-10-20T00:50:44.084+00:00","published_at":"2026-10-25T11:40:51.70262+00:00","extraction_method":"structured","technologies":["core-cve","safari","visionos","watchos"],"cve_ids":["CVE-2026-86872"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42026,"advisory_id":"7d869ec7-f208-4dfc-9ad7-360c64b03166","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86898","source_published_at":"2026-09-14T20:50:52.675+00:00","published_at":"2026-10-25T11:38:15.675282+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-86898"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86898","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.","evidence":"cve:CVE-2026-86898","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86898","aliases":["CVE-2026-86898"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:56:23.950479Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:56:27.129Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.967Z"}}},"related_cves":[{"value":"CVE-2026-86898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42013,"advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","source_published_at":"2026-09-14T20:49:05.014+00:00","published_at":"2026-10-25T11:38:07.48677+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84635"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41949,"advisory_id":"497b7db6-e3a6-429d-a580-4c35cf83cc64","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65351","source_published_at":"2026-08-17T21:31:25.582+00:00","published_at":"2026-10-25T11:37:20.08143+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65351"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65351","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65351","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65351","aliases":["CVE-2026-65351"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:18.206Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65351","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:00:05.468201Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:00:10.886Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:18.206Z"}}},"related_cves":[{"value":"CVE-2026-65351","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41943,"advisory_id":"3b5f7693-5f8a-4816-9dd0-00c04742c648","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65341","source_published_at":"2026-08-17T21:30:42.172+00:00","published_at":"2026-10-25T11:37:15.597523+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-65341"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65341","summary":"The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.","evidence":"cve:CVE-2026-65341","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65341","aliases":["CVE-2026-65341"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:16.623Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65341","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:33:06.390939Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:33:10.280Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:16.623Z"}}},"related_cves":[{"value":"CVE-2026-65341","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41942,"advisory_id":"bfc8117a-c02b-4a65-9bf3-348b6765c937","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65338","source_published_at":"2026-08-17T21:29:59.913+00:00","published_at":"2026-10-25T11:37:14.802818+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65338"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65338","summary":"The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65338","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65338","aliases":["CVE-2026-65338"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:16.096Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65338","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:21:43.935363Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:22:11.932Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:16.096Z"}}},"related_cves":[{"value":"CVE-2026-65338","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41941,"advisory_id":"84654f00-9217-44dd-88d8-7cd13a12aeb8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65340","source_published_at":"2026-08-17T21:31:03.232+00:00","published_at":"2026-10-25T11:37:14.200374+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65340"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65340","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65340","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65340","aliases":["CVE-2026-65340"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:16.346Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65340","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:36:45.857871Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:37:14.983Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:16.346Z"}}},"related_cves":[{"value":"CVE-2026-65340","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41940,"advisory_id":"ef7fea1f-dc69-43f0-b2bb-08c938da7185","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65337","source_published_at":"2026-08-17T21:31:00.092+00:00","published_at":"2026-10-25T11:37:13.586754+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65337"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65337","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65337","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65337","aliases":["CVE-2026-65337"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:15.823Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65337","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:35:57.394992Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:36:24.577Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:15.823Z"}}},"related_cves":[{"value":"CVE-2026-65337","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41939,"advisory_id":"65a86397-9d27-4e07-aedf-0fee2b1194f6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65335","source_published_at":"2026-08-17T21:30:18.797+00:00","published_at":"2026-10-25T11:37:12.965016+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65335"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65335","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65335","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65335","aliases":["CVE-2026-65335"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:15.287Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:24:12.483472Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:24:37.277Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:15.287Z"}}},"related_cves":[{"value":"CVE-2026-65335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41938,"advisory_id":"06b39a4a-7f9d-4112-a9c5-19b4c9ba35ae","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65336","source_published_at":"2026-08-17T21:30:49.391+00:00","published_at":"2026-10-25T11:37:12.339136+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65336"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65336","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65336","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65336","aliases":["CVE-2026-65336"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:15.579Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65336","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:34:36.759397Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:34:39.965Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:15.579Z"}}},"related_cves":[{"value":"CVE-2026-65336","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41937,"advisory_id":"fa3dc521-1553-4a07-9095-ed42be2d120a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65334","source_published_at":"2026-08-17T21:30:08.305+00:00","published_at":"2026-10-25T11:37:11.728851+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65334"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65334","summary":"A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65334","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65334","aliases":["CVE-2026-65334"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:14.938Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65334","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:23:29.033455Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:23:52.487Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:14.938Z"}}},"related_cves":[{"value":"CVE-2026-65334","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41936,"advisory_id":"bf54d051-bb71-46dd-9b29-5dd7bec400cc","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65332","source_published_at":"2026-08-17T21:29:09.891+00:00","published_at":"2026-10-25T11:37:11.119008+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65332"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65332","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65332","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65332","aliases":["CVE-2026-65332"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:14.421Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65332","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:16:21.424140Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:16:26.585Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:14.421Z"}}},"related_cves":[{"value":"CVE-2026-65332","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41935,"advisory_id":"61b34970-4614-4fa0-a9ca-2de3754b3059","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65331","source_published_at":"2026-08-17T21:31:37.955+00:00","published_at":"2026-10-25T11:37:10.503884+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65331"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65331","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65331","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65331","aliases":["CVE-2026-65331"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:14.158Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65331","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T12:54:37.312059Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T12:55:04.753Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:14.158Z"}}},"related_cves":[{"value":"CVE-2026-65331","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41934,"advisory_id":"d357486c-5bd1-44d3-83bd-9e8ed35d3b2c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65333","source_published_at":"2026-08-17T21:29:42.566+00:00","published_at":"2026-10-25T11:37:09.881081+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-65333"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65333","summary":"This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-65333","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65333","aliases":["CVE-2026-65333"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:14.657Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65333","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:20:09.319580Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:20:30.247Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:14.657Z"}}},"related_cves":[{"value":"CVE-2026-65333","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41930,"advisory_id":"ead5f3e6-638d-49d2-83a8-f426e76654d4","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64787","source_published_at":"2026-08-17T21:30:33.068+00:00","published_at":"2026-10-25T11:37:07.428058+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-64787"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64787","summary":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-64787","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64787","aliases":["CVE-2026-64787"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:13.092Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64787","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:27:21.753637Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:27:26.496Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:13.092Z"}}},"related_cves":[{"value":"CVE-2026-64787","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41929,"advisory_id":"6628c1ae-4f5d-4682-b85a-0ff94421f9b2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64784","source_published_at":"2026-08-17T21:30:45.212+00:00","published_at":"2026-10-25T11:37:06.811508+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-64784"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64784","summary":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-64784","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64784","aliases":["CVE-2026-64784"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:12.849Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64784","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:33:25.612094Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]},{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:33:50.511Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:12.849Z"}}},"related_cves":[{"value":"CVE-2026-64784","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41928,"advisory_id":"b1896bd7-1776-49fb-a47e-becba116df99","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64782","source_published_at":"2026-08-17T21:31:21.71+00:00","published_at":"2026-10-25T11:37:06.182534+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-64782"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64782","summary":"A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-64782","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64782","aliases":["CVE-2026-64782"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:12.566Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.1,"attackVector":"NETWORK","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64782","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:01:10.872795Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:23:14.376Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:12.566Z"}}},"related_cves":[{"value":"CVE-2026-64782","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41927,"advisory_id":"c71c1565-8223-4c11-b1c6-9170fc539454","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64781","source_published_at":"2026-08-17T21:29:34.312+00:00","published_at":"2026-10-25T11:37:05.540871+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-64781"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64781","summary":"The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-64781","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64781","aliases":["CVE-2026-64781"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:12.328Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64781","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:25:26.384672Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-20","description":"CWE-20 Improper Input Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:25:29.143Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:12.328Z"}}},"related_cves":[{"value":"CVE-2026-64781","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41926,"advisory_id":"b924cf54-f4f8-429f-ac68-35d604260375","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64780","source_published_at":"2026-08-17T21:29:17.121+00:00","published_at":"2026-10-25T11:37:04.936896+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-64780"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64780","summary":"The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-64780","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64780","aliases":["CVE-2026-64780"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:12.040Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64780","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:17:53.195718Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:18:14.311Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:12.040Z"}}},"related_cves":[{"value":"CVE-2026-64780","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41924,"advisory_id":"4a27f35d-7863-41fd-a23b-f693e565a8a9","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64753","source_published_at":"2026-09-14T20:48:40.978+00:00","published_at":"2026-10-25T11:37:03.645459+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-64753"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64753","summary":"A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.","evidence":"cve:CVE-2026-64753","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64753","aliases":["CVE-2026-64753"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:11.513Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64753","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T14:29:22.296376Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T14:29:24.982Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:11.513Z"}}},"related_cves":[{"value":"CVE-2026-64753","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41922,"advisory_id":"36880de4-d39b-48dc-a669-53e618846e1d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-64715","source_published_at":"2026-08-17T21:29:27.827+00:00","published_at":"2026-10-25T11:37:02.272699+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-64715"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-64715","summary":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.","evidence":"cve:CVE-2026-64715","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-64715","aliases":["CVE-2026-64715"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:10.996Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-64715","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:21:36.342847Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:21:43.347Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:10.996Z"}}},"related_cves":[{"value":"CVE-2026-64715","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41920,"advisory_id":"b710e93e-da62-4dd0-bf73-325c3c2c13ca","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-43794","source_published_at":"2026-08-17T21:31:33.77+00:00","published_at":"2026-10-25T11:37:00.940022+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-43794"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-43794","summary":"A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.","evidence":"cve:CVE-2026-43794","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-43794","aliases":["CVE-2026-43794"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:10.226Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-43794","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-18T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-19T03:55:53.857Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:10.226Z"}}},"related_cves":[{"value":"CVE-2026-43794","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41919,"advisory_id":"d4babf4b-e44d-4018-b939-30b7d994b45b","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-43795","source_published_at":"2026-08-17T21:31:14.573+00:00","published_at":"2026-10-25T11:37:00.280952+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"cve_ids":["CVE-2026-43795"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-43795","summary":"The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.","evidence":"cve:CVE-2026-43795","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-43795","aliases":["CVE-2026-43795"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"18.7.10","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6.1","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.6.2","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:10.478Z","provider":"cve","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/148286","https://support.apple.com/en-us/148287","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-43795","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-08-18T13:13:45.454496Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-119","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-08-18T13:14:06.864Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:10.478Z"}}},"related_cves":[{"value":"CVE-2026-43795","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":11962,"advisory_id":"9f73e8d0-6854-447a-98b4-37e8e462d10a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2023-41074","source_published_at":"2023-09-26T20:14:43.087+00:00","published_at":"2026-10-24T23:59:28.779244+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","watchos"],"cve_ids":["CVE-2023-41074"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2023-41074","summary":"The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.","evidence":"cve:CVE-2023-41074","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"Safari","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-41074","aliases":["CVE-2023-41074"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"unspecified","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"unspecified","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"unspecified","lessThan":"17","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"unspecified","lessThan":"14","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"unspecified","lessThan":"10","versionType":"custom"}]}],"modified":"2026-10-07T16:13:40.091Z","provider":"cve","references":["https://support.apple.com/en-us/HT213938","https://support.apple.com/en-us/HT213936","https://support.apple.com/en-us/HT213941","https://support.apple.com/en-us/HT213940","https://support.apple.com/en-us/HT213937","https://www.debian.org/security/2023/dsa-5527","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/","https://security.gentoo.org/glsa/202401-33"],"provider_metadata":{"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213938","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213936","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213941","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213940","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213937","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/3","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/2","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/10","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/8","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/9","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/3","tags":["x_transferred"]},{"url":"https://www.debian.org/security/2023/dsa-5527","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EEMDC5TQAANFH5D77QM34ZTUKXPFGVL/","tags":["x_transferred"]},{"url":"https://security.gentoo.org/glsa/202401-33","tags":["x_transferred"]},{"url":"https://webkitgtk.org/security/WSA-2023-0009.html"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-29T13:17:27.277Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2023-41074","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-06-03T16:02:12.442548Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-94","description":"CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-07T16:13:40.091Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2024-01-31T15:06:26.967Z"}}},"related_cves":[{"value":"CVE-2023-41074","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":45656,"next_before":11962}