Apple WebKit Denial-of-Service Vulnerability in Safari, iOS, iPadOS, watchOS, tvOS, and visionOS

A denial-of-service vulnerability has been identified in the WebKit component of Safari and various Apple operating systems, including iOS, iPadOS, watchOS, tvOS, and visionOS. This vulnerability allows processing of maliciously crafted web content, leading to an unexpected process crash. The issue arises from a use-after-free condition that was addressed with improved memory management.

Impact

Exploitation of this vulnerability causes an unexpected process crash, disrupting the normal operation of the application or service.

Remediation

This vulnerability has been fixed in Safari 26.1, as well as in the corresponding updates for iOS, iPadOS, watchOS, tvOS, and visionOS. Users should update to these versions to address the vulnerability.