CVE-2026-65390
גבוהה 8.8
תיאור (מקור, אנגלית)
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
מדדים
- CVSS 3.1
-
8.8 (HIGH)
מקור הציון: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-1/10/2026
- CWE
- CWE-190
מוצרים מושפעים
apple: safari; apple: ipados; apple: iphone os; apple: macos; apple: tvos; apple: visionos; apple: watchos
קישורים
- https://support.apple.com/en-us/148281 Release NotesVendor Advisory
- https://support.apple.com/en-us/148282 Release NotesVendor Advisory
- https://support.apple.com/en-us/148286 Release NotesVendor Advisory
- https://support.apple.com/en-us/149036 Release NotesVendor Advisory
- https://support.apple.com/en-us/149037 Release NotesVendor Advisory
- https://support.apple.com/en-us/149038 Release NotesVendor Advisory