Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

Apple WebKit Remote Code Execution Vulnerability

Vulnerability

A logic vulnerability in the WebKit component of Apple iOS, iPadOS, and macOS was addressed with improved restrictions. This vulnerability allows remote code execution and could have been actively exploited. It affects WebKitGTK+ versions prior to 2.30.6, as well as several different components in WebKit, including the WebKit framework itself, which is used by Safari and other applications.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected device.

Remediation

Users can upgrade to the latest version of WebKitGTK+. Instructions for upgrading can be found in the WebKitGTK+ security update announcement on the Fedora Mailing-Lists.

Added: May 15, 2026, 10:37 AM
Updated: May 15, 2026, 10:37 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
7.5
exploitability
6.1
remediation
7.7
relevance
0.0
threat
8.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.