Apple WebKit Memory Initialization Vulnerability Allowing Internal State Disclosure

A memory initialization vulnerability in WebKit was addressed with improved memory handling. This issue, present in multiple Apple operating systems including iOS, iPadOS, macOS Tahoe, tvOS, watchOS, and Safari, could allow processing of maliciously crafted web content to disclose internal states of the application.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of internal application states.

Remediation

Users can update to the latest version of the affected operating systems or applications. This vulnerability is fixed in iOS 26.2, iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, watchOS 26.2, and Safari 26.2.