Unrated
Safari, iOS and iPadOS and 4 more products — security advisory
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.
- Products
- Safari, iOS and iPadOS, macOS, tvOS, visionOS, watchOS
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-64787
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 21:35 UTC · Revision 2
Source evidence
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.
cve:CVE-2026-64787
Safari
Fixed versions: Not specified
iOS and iPadOS
Fixed versions: Not specified
macOS
Fixed versions: Not specified
tvOS
Fixed versions: Not specified
visionOS
Fixed versions: Not specified
watchOS
Fixed versions: Not specified
Complete source record
{
"id": "bbe1e092c125325295ab1d9a7455405f019da18d078f2edf459fd05c303ac2f7",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64787",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2026-64787",
"summary": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.",
"evidence": "cve:CVE-2026-64787",
"products": [
{
"name": {
"value": "Safari",
"evidence": "/containers/cna/affected/0/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "iOS and iPadOS",
"evidence": "/containers/cna/affected/1/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "macOS",
"evidence": "/containers/cna/affected/2/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "tvOS",
"evidence": "/containers/cna/affected/3/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "visionOS",
"evidence": "/containers/cna/affected/4/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "watchOS",
"evidence": "/containers/cna/affected/5/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-64787",
"aliases": [
"CVE-2026-64787"
],
"metrics": [],
"affected": [
{
"vendor": "Apple",
"product": "Safari",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "26.6.1",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "18.7.10",
"versionType": "custom"
},
{
"status": "affected",
"version": "0",
"lessThan": "26.6.1",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "26.6.2",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "tvOS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "27",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "visionOS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "27",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "watchOS",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "27",
"versionType": "custom"
}
]
}
],
"modified": "2026-10-26T20:38:31.947Z",
"provider": "cve",
"references": [
"https://support.apple.com/en-us/148281",
"https://support.apple.com/en-us/148282",
"https://support.apple.com/en-us/148286",
"https://support.apple.com/en-us/148287",
"https://support.apple.com/en-us/149036",
"https://support.apple.com/en-us/149037",
"https://support.apple.com/en-us/149038"
],
"provider_metadata": {
"adp": [
{
"title": "CISA ADP Vulnrichment",
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2026-64787",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-08-18T13:27:21.753637Z"
}
}
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"type": "CWE",
"cweId": "CWE-416",
"description": "CWE-416 Use After Free"
}
]
}
],
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-08-18T13:27:26.496Z"
}
}
],
"cna": {
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple",
"dateUpdated": "2026-10-26T20:38:31.947Z"
}
}
},
"related_cves": [
{
"value": "CVE-2026-64787",
"evidence": "/cveMetadata/cveId"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-cve",
"document_id": 344153,
"published_at": "2026-08-17T21:30:33.068+00:00"
}