ZeroDay Findings
Sign inSign up

Findings

CVE-2026-28946

A use-after-free issue was addressed with improved memory management.

Published May 11, 2026 · updated Jul 15, 2026 · apple macos

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 11, 2026 · NIST NVD

    Detected

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

  2. Jul 15, 2026 · NIST NVD

    Updated

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected

  • cpe apple/macosversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-28946

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-28946

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.

    nvd.nist.gov

References

CVE-2026-28946 · ZeroDay Findings