VDB
GHSA-q74v-rxg6-m2w6
GHSA-q74v-rxg6-m2w6
PUBLISHED
CVSS 4.300000190734863 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A malicious website may be able to process restricted web content outside the sandbox.
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Timeline
- Mar 25, 2026 CVE Published
- May 1, 2026 Security Advisory
- Jun 30, 2026 CVE Updated
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
- Aug 6, 2026 Distribution Patch
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-28859 advisory
- https://support.apple.com/en-us/126799 url
- https://support.apple.com/en-us/126794 url
- https://support.apple.com/en-us/126797 url
- https://support.apple.com/en-us/126800 url
- https://support.apple.com/en-us/126798 url
- https://support.apple.com/en-us/126792 url
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28859.json url
- https://bugzilla.redhat.com/show_bug.cgi?id=2453006 url
- https://access.redhat.com/security/cve/CVE-2026-28859 url
- https://access.redhat.com/errata/RHSA-2026:9692 url
- https://access.redhat.com/errata/RHSA-2026:22136 url
- https://access.redhat.com/errata/RHSA-2026:19535 url
- https://access.redhat.com/errata/RHSA-2026:19206 url
- https://access.redhat.com/errata/RHSA-2026:16695 url
- https://access.redhat.com/errata/RHSA-2026:16056 url
- https://access.redhat.com/errata/RHSA-2026:14659 url
- https://access.redhat.com/errata/RHSA-2026:13845 url
- https://access.redhat.com/errata/RHSA-2026:11814 url
- https://access.redhat.com/errata/RHSA-2026:11329 url
…and 1 more