The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote attacker may be able to cause a denial-of-service.
2026-02-11T23:16:08.033
2026-02-13T14:46:38.773
Analyzed
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | apple | safari | < 26.3 | Yes |
| Operating System | apple | ipados | < 18.7.5 | Yes |
| Operating System | apple | ipados | < 26.3 | Yes |
| Operating System | apple | iphone_os | < 18.7.5 | Yes |
| Operating System | apple | iphone_os | < 26.3 | Yes |
| Operating System | apple | macos | < 26.3 | Yes |
| Operating System | apple | visionos | < 26.3 | Yes |