Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Patch1 |
| 2026-05-16 | 1 | Disclosure1 |
Apple fixed two vulnerabilities I reported affecting Safari/WebKit: CVE-2026-28953 and CVE-2026-28901. Sometimes mitigations can create new attack surfaces. https://support.apple.com/en-us/127110
Post summary
The author reports that Apple has fixed two Safari/WebKit vulnerabilities (CVE-2026-28953 & CVE-2026-28901) and points to an Apple support advisory for details.
CVE-2026-28953 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 18.7.8/26.4 Web denial of service (WID-SEC-2026-1543) https://ift.tt/ufWcH3Z A vulnerability categorized as problematic has been discovered in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 18.7.8/…
Post summary
A denial‑of‑service vulnerability (CVE-2026-28953) affecting Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to versions 18.7.8/26.4 has been announced, with no mention of exploitation, patches or debunking.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |