Vulnerability Details CVE-2026-28946
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 31.6%
CVSS Severity
CVSS v3 Score 6.5
References
- https://support.apple.com/en-us/127115
- https://support.apple.com/en-us/127121
- https://access.redhat.com/errata/RHSA-2026:25918
- https://access.redhat.com/errata/RHSA-2026:25927
- https://access.redhat.com/errata/RHSA-2026:27728
- https://access.redhat.com/errata/RHSA-2026:27785
- https://access.redhat.com/errata/RHSA-2026:27804
- https://access.redhat.com/errata/RHSA-2026:28114
- https://access.redhat.com/errata/RHSA-2026:28146
- https://access.redhat.com/errata/RHSA-2026:28147
- https://access.redhat.com/errata/RHSA-2026:28148
- https://access.redhat.com/security/cve/CVE-2026-28946
- https://bugzilla.redhat.com/show_bug.cgi?id=2471790
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28946.json
Products affected by CVE-2026-28946
-
cpe:2.3:o:apple:macos:26.0
-
cpe:2.3:o:apple:macos:26.0.0
-
cpe:2.3:o:apple:macos:26.1
-
cpe:2.3:o:apple:macos:26.2
-
cpe:2.3:o:apple:macos:26.3
-
cpe:2.3:o:apple:macos:26.3.1
-
cpe:2.3:o:apple:macos:26.4