CVE-2026-28859 PUBLISHED CVSS 4.300000190734863 MEDIUM

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox.

EPSS 0.02% · 6.5th percentile

Risk Scores

CVSS v3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
0.02%
6.5th percentile

Affected Products

VendorProductVersions
ApplewatchOS0
AppleiOS and iPadOS0
appleipados0
AppletvOS0
appletvos0
applewatchos0
AppleSafari0
applevisionos0
ApplevisionOS0
ApplemacOS0
applesafari0
appleiphone_os0
applemacos0

Timeline

References

Open in Interactive Console →