CVE-2026-64718
published 2026-07-27CVE-2026-64718: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and…
PriorityP422medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.21%
10.8th percentile
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, visionOS 27, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 26.6 | 26.6 |
| apple | ios_and_ipados | < 26.7 | 26.7 |
| apple | ios_and_ipados | < 27 | 27 |
| apple | ipados | < 26.6 | 26.6 |
| apple | iphone_os | < 26.6 | 26.6 |
| apple | macos | < 26.6 | 26.6 |
| apple | macos | < 27 | 27 |
| apple | macos | >= 26.0 < 26.6 | 26.6 |
| apple | safari | < 27 | 27 |
| apple | safari | < 26.6 | 26.6 |
| apple | tvos | < 26.6 | 26.6 |
| apple | visionos | < 27 | 27 |
| apple | visionos | < 26.6 | 26.6 |
| apple | watchos | < 26.6 | 26.6 |
| webkitgtk | webkitgtk | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
vendor_oracle2.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/macOS/Safari/tvOS/visionOS/watchOS up to 26.5 use after free
vuldb·2026-07-28
CVE-2026-64718 [CRITICAL] Apple iOS/iPadOS/macOS/Safari/tvOS/visionOS/watchOS up to 26.5 use after free
A vulnerability was found in Apple iOS, iPadOS, macOS, Safari, tvOS, visionOS and watchOS up to 26.5. It has been classified as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in use after free.
This vulnerability was named CVE-2026-64718. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
A use-after-free issue was addressed with improved memory management.
ghsa_unreviewed·2026-07-27
CVE-2026-64718 [MEDIUM] CWE-416 A use-after-free issue was addressed with improved memory management.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Red Hat
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
vendor_redhat·2026-07-27·CVSS 5.5
CVE-2026-64718 [MEDIUM] CWE-416 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash.
Statement: To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw has been rated with an important severity.
Additionally, this issue can cause an unexpected process crash but th
Oracle
Oracle Oracle Communications Risk Matrix: Core (node-forge) — CVE-2025-64718
vendor_oracle·2026-01-15·CVSS 2.4
CVE-2025-64718 [MEDIUM] Oracle Oracle Communications Risk Matrix: Core (node-forge) — CVE-2025-64718
Oracle Oracle Communications Risk Matrix: Core (node-forge) vulnerability
CVE: CVE-2025-64718
CVSS: 2.4
Protocol: HTTP
Remote exploit: No
Affected versions: Network
Advisory: cpujan2026 (JAN 2026)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash [fedora-all]
bugzilla·2026-08-27·CVSS 5.5
CVE-2026-64718 [MEDIUM] CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash [fedora-all]
CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Discussion:
This bug only affects Apple platforms.
Bugzilla
CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash [epel-all]
bugzilla·2026-08-27·CVSS 5.5
CVE-2026-64718 [MEDIUM] CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash [epel-all]
CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Discussion:
This bug only affects Apple platforms.
Bugzilla
CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
bugzilla·2026-08-26·CVSS 5.5
CVE-2026-64718 [MEDIUM] CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
CVE-2026-64718 webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Bugzilla
CVE-2025-64718 ansible: js-yaml prototype pollution in merge [epel-8]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 ansible: js-yaml prototype pollution in merge [epel-8]
CVE-2025-64718 ansible: js-yaml prototype pollution in merge [epel-8]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
FEDORA-2026-a8a5f6b41b (ansible-13.7.0-1.fc45 and ansible-core-2.20.6-1.fc45) has been submitted as an update to Fedora 45.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-a8a5f6b41b
---
FEDORA-2026-a8a5f6b41b (
Bugzilla
CVE-2025-64718 ansible: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 ansible: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 ansible: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from re
Bugzilla
CVE-2025-64718 python-XStatic-JS-Yaml: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 python-XStatic-JS-Yaml: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 python-XStatic-JS-Yaml: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug
Bugzilla
CVE-2025-64718 grafana: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 grafana: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 grafana: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from re
Bugzilla
CVE-2025-64718 magicmirror: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 magicmirror: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 magicmirror: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports fro
Bugzilla
CVE-2025-64718 389-ds-base: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 389-ds-base: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 389-ds-base: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports fro
Bugzilla
CVE-2025-64718 onnxruntime: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 onnxruntime: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 onnxruntime: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports fro
Bugzilla
CVE-2025-64718 h3: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 h3: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 h3: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from release
Bugzilla
CVE-2025-64718 workrave: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 workrave: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 workrave: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from r
Bugzilla
CVE-2025-64718 ansible-collection-awx-awx: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 ansible-collection-awx-awx: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 ansible-collection-awx-awx: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all
Bugzilla
CVE-2025-64718 forgejo: js-yaml prototype pollution in merge [fedora-42]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 forgejo: js-yaml prototype pollution in merge [fedora-42]
CVE-2025-64718 forgejo: js-yaml prototype pollution in merge [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from re
Bugzilla
CVE-2025-64718 ansible: js-yaml prototype pollution in merge [fedora-43]
bugzilla·2025-12-15·CVSS 5.3
CVE-2025-64718 [MEDIUM] CVE-2025-64718 ansible: js-yaml prototype pollution in merge [fedora-43]
CVE-2025-64718 ansible: js-yaml prototype pollution in merge [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
FEDORA-2026-a8a5f6b41b (ansible-13.7.0-1.fc45 and ansible-core-2.20.6-1.fc45) has been submitted as an update to Fedora 45.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-a8a5f6b41b
---
FEDORA-2026-a8a5f6b41
Sans Isc
Apple Updates Everything, (Mon, Sep 14th)
blogs_sans_isc·2026-09-14·CVSS 6.5
CVE-2022-3437 [MEDIUM] Apple Updates Everything, (Mon, Sep 14th)
Apple Updates Everything
Published: 2026-09-14. Last Updated: 2026-09-14 18:33:44 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
Today, Apple released its annual update across all its operating systems. With that, Apple not only released new features but also patched 261 different vulnerabilities. This is the most vulnerabilities Apple has ever patched, but the increase is not as significant as other vendors' "post-AI" patch releases.
In addition to the major "27" version, Apple also released bug-fix-only releases for the 26 branch of its operating systems and for 15 (Sequioa) for macOS. None of the vulnerabilities is labeled as being exploited. Apple does not note a severity to individual vulnerabilities.
There are some reports about difficulties downloading iOS 27. Users instead
Sans Isc
Apple Patches Everything (July 2026), (Wed, Jul 29th)
blogs_sans_isc·2026-07-29·CVSS 5.5
CVE-2026-28849 [MEDIUM] Apple Patches Everything (July 2026), (Wed, Jul 29th)
Apple Patches Everything (July 2026)
Published: 2026-07-29. Last Updated: 2026-07-29 07:32:37 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
I am a bit late with this summary, but this week Apple released updates to all its operating systems and Safari. The Safari update, as usual, targets macOS prior to macOS 26. macOS updates covered the two older versions (14 and 15), while other operating system patches only covered the current 26 versions.
A total of 187 vulnerabilities are addressed in this update. Many cover multiple operating systems. Apple did not label any of the vulnerabilities as already being exploited.
Three vulnerabilities that caught my interest are CVE-2026-28849, CVE-2026-28900, and CVE-2026-28914. These issues appear to be the vulnerability described in https://m
https://support.apple.com/en-us/128066https://support.apple.com/en-us/128067https://support.apple.com/en-us/128068https://support.apple.com/en-us/128069https://support.apple.com/en-us/128070https://support.apple.com/en-us/128073https://support.apple.com/en-us/149034https://support.apple.com/en-us/149035https://support.apple.com/en-us/149038https://support.apple.com/en-us/149039https://support.apple.com/en-us/149041
2026-07-27
Published