Description

A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may disclose internal states of the app.

Related CPE's

a

apple

safari

Vulnerable

o

apple

ipados

Vulnerable

o

apple

iphone_os

Vulnerable

o

apple

macos

Vulnerable

o

apple

tvos

Vulnerable

o

apple

visionos

Vulnerable

o

apple

watchos

Vulnerable

References

https://support.apple.com/en-us/125884

Release NotesVendor Advisory

https://support.apple.com/en-us/125886

Release NotesVendor Advisory

https://support.apple.com/en-us/125889

Release NotesVendor Advisory

https://support.apple.com/en-us/125890

Release NotesVendor Advisory

https://support.apple.com/en-us/125891

Release NotesVendor Advisory

https://support.apple.com/en-us/125892

Release NotesVendor Advisory

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary
CWE-284

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

4.3 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-01-09T22:15:59.797Z

4 days ago

Last modified

2026-01-14T17:45:42.583Z

2 hours ago