VDB
GHSA-r6xf-37w8-p5j6
GHSA-r6xf-37w8-p5j6
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published March 25, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- Mar 25, 2026 CVE Published
- Mar 25, 2026 CVE Updated
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-r6xf-37w8-p5j6
vulnetix vdb fixes GHSA-r6xf-37w8-p5j6Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-r6xf-37w8-p5j6/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/126798 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-28879 advisory
- https://support.apple.com/en-us/126792 advisory
- https://support.apple.com/en-us/126793 advisory
- https://support.apple.com/en-us/126795 advisory
- https://support.apple.com/en-us/126796 advisory
- https://support.apple.com/en-us/126794 advisory
- https://support.apple.com/en-us/126797 advisory
- https://support.apple.com/en-us/126799 advisory