Description

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "4.3",
  "pubDate": "2026-08-17T22:17:24.130Z",
  "pubdate": "2026-08-17T22:17:24.130Z",
  "executiveSummary": "An availability vulnerability exists in Safari regarding the processing of maliciously crafted web content.\nThe primary impact of successful exploitation is an unexpected application crash, leading to a denial of service condition for the user browsing session.\nAffected systems include iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2.\nThe risk implication is primarily operational disruption, potentially degrading user experience and forcing application restarts.\nAttacker capabilities involve the ability to construct and deliver malicious web content via standard web vectors such as compromised websites or malicious advertisements.\nExploitation requirements include the victim processing the maliciously crafted web content within the vulnerable browser environment.",
  "technicalDetails": "The vulnerability stems from improper state management within the browser engine components responsible for rendering and parsing web content.\nThe root cause is a failure in the application logic to correctly maintain internal state when encountering anomalous or maliciously structured input data.\nThe vulnerable component is the Safari web content processing pipeline, which handles incoming HTML, CSS, JavaScript, or associated multimedia assets.\nExploitation occurs when a user navigates to a remote server controlled by an attacker, or views content injected into a legitimate site, which serves the maliciously crafted web content.\nUpon ingestion of the anomalous payload, the browser encounters an unhandled exception or enters an inconsistent state during execution.\nThis invalid state triggers a fatal error condition that forces the application runtime to terminate abruptly, resulting in an unexpected Safari crash.\nNetwork exposure is remote, as the attack vector relies on web content delivered over standard protocols such as HTTP or HTTPS.\nAuthentication and privilege requirements are minimal or non-existent, since an unauthenticated external entity can host the malicious web content and induce a victim to load it.\nPost-exploitation impact is limited to the immediate denial of service of the Safari browser instance, with no direct indication of remote code execution or arbitrary system compromise based on the provided data."
}