Apple WebKit Out-of-Bounds Vulnerability in Keynote and macOS

A vulnerability allowing memory contents to be disclosed has been identified in WebKit, the engine used by Keynote and various macOS applications. This issue arises from improper bounds checks when processing maliciously crafted media files, particularly in Keynote 15.1 and macOS Tahoe 26. The vulnerability is present in several Apple products, including Mac and iOS devices with Apple silicon or specific Intel-based MacBook Pro models.

Impact

Exploitation of this vulnerability could lead to unauthorized memory access, potentially allowing for memory contents to be read or manipulated.

Remediation

Users can update to Keynote 15.1 on macOS Sequoia 15.6 and later, or to macOS Tahoe 26, both of which include the necessary fix.