Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

Apple WebKit Type Confusion Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A type confusion vulnerability has been identified in the WebKit component of multiple Apple products, including iOS, iPadOS, macOS, tvOS, and Safari. This vulnerability allows for arbitrary code execution when processing maliciously crafted web content. It affects several different versions and/or ranges of these operating systems. The issue is linked to the Coruna exploit, which has been reported to be actively exploited.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected device.

Remediation

Users can update to the latest versions of the affected operating systems. Instructions for updating can be found on the Apple Support website.

Added: May 15, 2026, 11:10 AM
Updated: May 15, 2026, 11:10 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
7.5
exploitability
5.3
remediation
7.7
relevance
0.0
threat
8.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.