CVE-2026-64779

EUVD-2026-60482
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
appleCNA
3.1 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 29.42%
Affected Products (NVD)
VendorProductVersion
appleipados
𝑥
< 18.7.10
appleipados
26.0 ≤
𝑥
< 26.6.1
appleiphone_os
𝑥
< 18.7.10
appleiphone_os
26.0 ≤
𝑥
< 26.6.1
applemacos
26.0 ≤
𝑥
< 26.6.2
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
applesafari
𝑥
< 26.6.1
CNA
applesafari
𝑥
< 18.7.10
CNA
applesafari
𝑥
< 26.6.2
CNA
applesafari
𝑥
< 27
CNA
Debian logo
Debian Releases
Debian Product
Codename
webkit2gtk
bookworm
vulnerable
bookworm (security)
vulnerable
forky
vulnerable
sid
2.54.0-1
fixed
trixie
vulnerable
trixie (security)
2.54.0-1~deb13u1
fixed
wpewebkit
bookworm
ignored
forky
2.54.0-2
fixed
sid
2.54.0-2
fixed
trixie
ignored
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
webkit2gtk3
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-devel
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-jsc
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-jsc-devel
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
webkitgtk4
Amazon Linux 2
0:2.52.6-1.amzn2.0.2
fixed
webkitgtk4-devel
Amazon Linux 2
0:2.52.6-1.amzn2.0.2
fixed
webkitgtk4-jsc
Amazon Linux 2
0:2.52.6-1.amzn2.0.2
fixed
webkitgtk4-jsc-devel
Amazon Linux 2
0:2.52.6-1.amzn2.0.2
fixed