HIGH

CVE-2026-65390

Apple Safari 2026-09-14 CVSS v3.1

CVSS

8.8

Description

An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

Weakness (CWE)

CWE-190 Integer Overflow

EPSS Score

0.39%

Probability of exploitation in next 30 days

33.4th percentile

References

https://support.apple.com/en-us/148281 Release Notes, Vendor Advisory https://support.apple.com/en-us/148282 Release Notes, Vendor Advisory https://support.apple.com/en-us/148286 Release Notes, Vendor Advisory https://support.apple.com/en-us/149036 Release Notes, Vendor Advisory https://support.apple.com/en-us/149037 Release Notes, Vendor Advisory https://support.apple.com/en-us/149038 Release Notes, Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE