Apple WebKit Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in WebKit, the engine that powers the Safari browser. This issue is present in WebKit versions included with Safari 26.1, as well as in the WebKit components of visionOS 26.1, watchOS 26.1, and tvOS 26.1. The vulnerability arises from WebKit processing maliciously crafted web content, which can lead to an unexpected process crash. This issue was addressed with improved memory management and input validation.

Impact

Exploitation of this vulnerability causes a process crash, leading to a denial-of-service condition.

Remediation

Users can update to Safari 26.1, or the respective 26.1 version of their Apple device's operating system, to address this vulnerability.