The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may lead to memory corruption.
| Vendor | Product | Versions |
|---|---|---|
| apple | safari | < 18.6, < 18.6, < 18.6, < 15.6, < 18.6, < 2.6, < 11.6, < 17.7.9, < 14.7.7, < 13.7.7, < 18.7, < 26.3 |
Updated affected versions to include '< 26.3', added patch version '26.3', and included new IoCs and tags related to the DarkSword exploit chain.
Updated CVSS score to 8.8 and added CISA KEV tag.
Updated affected versions to include < 18.7, added patch version 26.3, and included a new IOC domain snapshare.chat.
Added new affected versions and included CWE-20.
Initial creation