CVE-2026-64784Disclosure(apple / ipados)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apple ipados systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

apple CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://support.apple.com/en-us/149038

Weakness type (CWE)

CWE-125CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
safari

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

apple

Products

ipadosiphone_osmacossafari

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets3 URLs

By indicator

Full discourse1 post

Out of Bounds@oobs_io45d
Disclosure
Our researcher @generally_oui reported CVE-2026-64784, an out-of-bounds bug in WebKit fixed in Safari 26.6.1. https://support.apple.com/en-us/148286 In our analysis it reached AAR, AAW in web content process. (exclude PAC) We'll write a detailed write-up on http://oobs.io as soon as this issue become stable. Stay tuned!
Post summary
A researcher reported CVE-2026-64784, an out-of-bounds WebKit defect that has already been fixed in Safari 26.6.1, with no PoC, exploit, or active exploitation mentioned.
210083296.0K
363 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
App	apple	safari	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities