Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

Apple iOS WebKit Memory Corruption Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A memory corruption vulnerability has been identified in the WebKit component of Apple iOS. This issue affects iOS devices including the iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch (6th generation). The vulnerability arises from improper state management, which can be exploited by processing maliciously crafted web content, leading to arbitrary code execution. Apple is aware of reports suggesting that this vulnerability may have been actively exploited.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the affected device.

Remediation

Users can update to iOS 12.5.4 to address this vulnerability.

Added: May 15, 2026, 10:29 AM
Updated: May 15, 2026, 10:29 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
7.3
remediation
0.0
relevance
0.0
threat
8.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.