← back
CVE-2026-28946

CVE-2026-28946

CVSS 6.5 MEDIUMEPSS 0.4%CWE-416
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
11 May 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Apple · macOSApple · Safari
References
https://access.redhat.com/errata/RHSA-2026:25918https://access.redhat.com/errata/RHSA-2026:25927https://access.redhat.com/errata/RHSA-2026:27728https://access.redhat.com/errata/RHSA-2026:27785https://access.redhat.com/errata/RHSA-2026:27804https://access.redhat.com/errata/RHSA-2026:28114https://access.redhat.com/errata/RHSA-2026:28146https://access.redhat.com/errata/RHSA-2026:28147https://access.redhat.com/errata/RHSA-2026:28148https://access.redhat.com/security/cve/CVE-2026-28946https://bugzilla.redhat.com/show_bug.cgi?id=2471790https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28946.json