Description
A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affected products
apple: safari; apple: ipados; apple: iphone os; apple: macos; apple: tvos; apple: watchos
References5
- support.apple.com/en-us/149230 Vendor Advisory
- support.apple.com/en-us/149521 Vendor Advisory
- support.apple.com/en-us/149524 Vendor Advisory
- support.apple.com/en-us/149525 Vendor Advisory
- support.apple.com/en-us/149527 Vendor Advisory
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 0% percentile: 24 · as of 8 November 2026
- CWE
- CWE-362
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.