{"id":"EUVD-2026-40183","enisaUuid":"abd6aa1a-a8bc-3643-8a01-f381c8dc670b","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.","datePublished":"Jun 29, 2026, 7:42:42 PM","dateUpdated":"Jul 27, 2026, 8:12:05 PM","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\n","aliases":"CVE-2026-43715\nGHSA-rvhg-xh7h-fp5g\n","assigner":"apple","epss":0.89,"enisaIdProduct":[{"id":"16b57f04-2ada-37d9-9d74-c0add500f4eb","product":{"name":"visionOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"1d2321cf-fbb4-39d7-bcfb-d2ff8ff225bc","product":{"name":"watchOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"a711e3bd-2496-303d-b970-c665449c9843","product":{"name":"tvOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"b10cd81f-047d-39d1-abc5-72b577e78359","product":{"name":"Safari","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"d2e33015-1466-31a3-a0a0-79a57b64ea92","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"ddb63e1b-a871-34f1-8e70-841d174586ac","product":{"name":"macOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"}],"enisaIdVendor":[{"id":"2ef3d7ae-9f3c-3e48-b05d-961c702d7aef","vendor":{"name":"Apple"}}],"enisaIdVulnerability":[{"id":"55b545d1-24d9-3ad6-9e86-b5834cc6cd19","vulnerability":{"id":"GHSA-rvhg-xh7h-fp5g","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to memory corruption.","datePublished":"Jun 29, 2026, 9:32:14 PM","dateUpdated":"Jul 27, 2026, 9:31:09 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-43715\nhttps://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\n","enisa_id":"EUVD-2026-40183\n","aliases":"GHSA-rvhg-xh7h-fp5g\nCVE-2026-43715\n","epss":0.0,"dataProcessed":"Aug 2, 2026, 3:30:36 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d8443f3f-1b3f-32ed-b4c4-e36b30579a4f","vulnerability":{"id":"CVE-2026-43715","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.","datePublished":"Jun 29, 2026, 7:42:42 PM","dateUpdated":"Jul 27, 2026, 8:12:05 PM","status":"PUBLISHED","baseScore":8.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://support.apple.com/en-us/127594\nhttps://support.apple.com/en-us/127595\nhttps://support.apple.com/en-us/127685\nhttps://support.apple.com/en-us/128068\nhttps://support.apple.com/en-us/128069\nhttps://support.apple.com/en-us/128070\n","enisa_id":"EUVD-2026-40183\n","assigner":"apple","epss":0.89,"dataProcessed":"Aug 6, 2026, 7:23:49 AM","vulnerabilityProduct":[{"id":"1f91e641-1d16-3034-af57-c37746239fb3","product":{"name":"macOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"3ca5e834-9f3d-3107-a503-5cbaed48a1b3","product":{"name":"iOS and iPadOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"3d2b2f6c-19c2-3ecf-8d89-9b7f3a313469","product":{"name":"watchOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"5d98c3cf-4429-3ea7-8273-298901f0733f","product":{"name":"Safari","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.5.2"},{"id":"6f87a901-bb4b-3570-aae6-0ea9258fb96e","product":{"name":"visionOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"},{"id":"d6da2fb1-9787-3bfc-9385-2fb2aaf2152c","product":{"name":"tvOS","vendor":{"name":"Apple"}},"product_version":"0 \u003c26.6"}],"vulnerabilityVendor":[{"id":"08bc73d6-b11f-3da2-a8a5-a584752a0b3b","vendor":{"name":"Apple"}}]}}],"enisaIdAdvisory":[{"id":"3de9ef0e-c3da-3628-8635-ef1ebe0f5b7b","advisory":{"id":"NCSC-2026-0214","description":"Kwetsbaarheden verholpen in Apple MacOS","datePublished":"Jun 30, 2026, 11:47:30 AM","dateUpdated":"Jun 30, 2026, 11:47:30 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-28979\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43703\nCVE-2026-43704\nCVE-2026-43705\nCVE-2026-43706\nCVE-2026-43707\nCVE-2026-43708\nCVE-2026-43709\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43717\nCVE-2026-43718\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43722\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43743\nCVE-2026-43745\nCVE-2026-43746\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"383e5cac-c8a8-3b54-aa94-bb49d81c7296","product":{"name":"macOS Tahoe","vendor":{"name":"Apple"}}}]}},{"id":"9294d92d-8155-353e-b7c2-72e2343235be","advisory":{"id":"WID-SEC-W-2026-2358","description":"WebKitGTK: Mehrere Schwachstellen","summary":"Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in WebKitGTK ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen daten zu manipulieren und Sicherheitsvorkehrungen zu umgehen","datePublished":"Jul 14, 2026, 10:00:00 PM","dateUpdated":"Jul 21, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2358.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-2358\n","aliases":"CVE-2024-4367\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43701\nCVE-2026-43705\nCVE-2026-43707\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43745\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"78c31c91-fe95-3b65-90f6-09c6229a20e5","product":{"name":"2.52.5","vendor":{"name":"open source"}}},{"id":"985b6461-f08c-3e5a-b74f-5df19bf1cfd8","product":{"name":"RESF Rocky Linux","vendor":{"name":"RESF"}}},{"id":"a747116d-6d8d-3ee1-a683-b01910897f41","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"c27d20f9-a068-3845-a17b-a34615c84980","product":{"name":"webkitgtk","vendor":{"name":"The WebKitGTK Team"}}},{"id":"e0022cc1-c7be-3a4f-92d7-5135215821bc","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}}]}},{"id":"fb6a3971-eb97-30c6-95ff-bc4bf2a197c2","advisory":{"id":"NCSC-2026-0215","description":"Kwetsbaarheden verholpen in Apple iOS en iPadOS","datePublished":"Jun 30, 2026, 11:48:34 AM","dateUpdated":"Jun 30, 2026, 11:48:34 AM","baseScore":0.0,"references":"","aliases":"CVE-2026-28979\nCVE-2026-39868\nCVE-2026-39872\nCVE-2026-43663\nCVE-2026-43676\nCVE-2026-43699\nCVE-2026-43700\nCVE-2026-43701\nCVE-2026-43703\nCVE-2026-43704\nCVE-2026-43705\nCVE-2026-43706\nCVE-2026-43707\nCVE-2026-43708\nCVE-2026-43709\nCVE-2026-43712\nCVE-2026-43713\nCVE-2026-43715\nCVE-2026-43716\nCVE-2026-43717\nCVE-2026-43718\nCVE-2026-43720\nCVE-2026-43721\nCVE-2026-43722\nCVE-2026-43724\nCVE-2026-43725\nCVE-2026-43726\nCVE-2026-43727\nCVE-2026-43731\nCVE-2026-43732\nCVE-2026-43734\nCVE-2026-43735\nCVE-2026-43740\nCVE-2026-43742\nCVE-2026-43743\nCVE-2026-43745\nCVE-2026-43746\n","source":{"id":19,"name":"csaf_ncscnl"},"advisoryProduct":[{"id":"2a0ce2ad-90a1-383b-a162-78ddc34c0510","product":{"name":"iPadOS","vendor":{"name":"Apple"}}},{"id":"3fe6363b-8912-31a5-9fef-cb40a62733bc","product":{"name":"IOS","vendor":{"name":"Cisco"}}}]}}]}