Apple WebKit Use-After-Free Vulnerability Leading to Process Crash

A use-after-free vulnerability has been identified in the WebKit component of Apple Safari, visionOS, watchOS, iOS, iPadOS, and tvOS. This vulnerability allows maliciously crafted web content to be processed in a way that leads to memory corruption, causing an unexpected crash of the affected process. The issue arises from improper memory management, which can be exploited by processing certain types of media files or visiting malicious websites.

Impact

Exploitation of this vulnerability causes a process crash, disrupting the normal operation of the application or service in use.

Remediation

This vulnerability has been fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1, iPadOS 26.1, and tvOS 26.1.