CVE-2026-28857PATCHED

apple · safari

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lea

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected Products

Vendor	Product	Versions
apple	safari	< 26.4, < 26.4, < 26.4, < 26.4, < 26.4

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
open source	webkitgtk	cert_advisory	90%

References

https://support.apple.com/en-us/126792(Vendor Advisory)
https://support.apple.com/en-us/126794(Vendor Advisory)
https://support.apple.com/en-us/126799(Vendor Advisory)
https://support.apple.com/en-us/126800(Vendor Advisory)

Related News (1 articles)

Tier B

BSI Advisories3d ago

[NEU] [mittel] WebKitGTK: Mehrere Schwachstellen

→ No new info (linked only)

CVSS 3.16.5 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

26.4

CWECWE-125, CWE-416, CWE-787

PublishedMar 25, 2026

Last enriched21h ago

Trending Score14

Source articles1

Independent1

Info Completeness9/14

Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-20700EXPKEV

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memo

Trending: 98

PRE-CVEEXP

Coruna iPhone Hacking Toolkit Exploiting iOS Vulnerabilities

Trending: 39

MEDIUMCVE-2026-28892

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of t

Trending: 23

MEDIUMCVE-2026-20665

This issue was addressed through improved state management. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watc

Trending: 14

MEDIUMCVE-2026-20664

Trending: 14

Pin to Dashboard

Verification

State: verified

Confidence: 100%

Vulnerability Timeline

CVE Published

Mar 25, 2026

Patch Available

Mar 26, 2026

Discovered by ZDM

Apr 1, 2026