Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
[ZDI-26-313|CVE-2026-28847] Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8) https://www.zerodayinitiative.com/advisories/ZDI-26-313/
Post summary
The text announces the discovery of a Safari heap-based buffer overflow RCE vulnerability (CVE-2026-28847) rated CVSS 8.8, with no evidence of exploitation or mitigation details provided.
CVE-2026-28847 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 18.7.8/26.4 Web denial of service (WID-SEC-2026-1543) https://ift.tt/4RHZNPs A vulnerability classified as problematic was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 18.7.8/26.4. This …
Post summary
The text announces CVE‑2026‑28847, a web denial‑of‑service flaw affecting multiple Apple OS versions, but provides no PoC, exploit code, active exploitation evidence, or patch information beyond the initial vulnerability details.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |