Apple WebKit Denial-of-Service and Process Crash Vulnerability

A vulnerability in WebKit, the engine used by Safari and other Apple applications, can be exploited by processing maliciously crafted web content, leading to an unexpected process crash. This issue is present in WebKit versions bundled with macOS Tahoe 26.3, iOS 18.7.5, iPadOS 18.7.5, visionOS 26.3, and Safari 26.3. The vulnerability arises from improper memory handling, which has been addressed in the respective 26.3 updates for these platforms.

Impact

Exploitation of this vulnerability can cause a process to crash unexpectedly, disrupting the normal operation of the application or service using WebKit.