Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Patch1 |
| 2026-05-16 | 1 | Disclosure1 |
Apple fixed two vulnerabilities I reported affecting Safari/WebKit: CVE-2026-28953 and CVE-2026-28901. Sometimes mitigations can create new attack surfaces. https://support.apple.com/en-us/127110
Post summary
Apple has released patches for two Safari/WebKit CVEs—CVE‑2026‑28953 and CVE‑2026‑28901—though the announcement does not provide technical details of the vulnerabilities.
CVE-2026-28901 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 26.4 Web denial of service (WID-SEC-2026-1543) https://ift.tt/vO92fLI A vulnerability categorized as problematic has been discovered in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 26.4. This aff…
Post summary
The text announces a new web‐based denial of service vulnerability (CVE‑2026‑28901) affecting multiple Apple operating systems up to version 26.4, but does not provide PoC, exploit code, patches, or evidence of active exploitation.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |