\n<\/p>\n
Apple has published a full list of security fixes for Safari 26.5, including a WebKit vulnerability that could allow maliciously crafted web content to expose sensitive user information. Here are the details.<\/p>\n
On that day, the company released the full security content of each update, and you can find more details about it here.<\/p>\n
Now, Apple has released security content for Safari 26.5, which includes fixes for 20 WebKit vulnerabilities, as well as a WebRTC issue that can cause unexpected process crashes.<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Malformed web content processing may prevent the Content Security Policy from being applied<\/p>\n
Description: The authentication problem has been addressed with an improved logic.<\/p>\n
WebKit Bugzilla: 308906<\/p>\n
CVE-2026-43660: Cantina<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Malformed web content processing may prevent the Content Security Policy from being applied<\/p>\n
Description: An issue was addressed with improved input validation.<\/p>\n
WebKit Bugzilla: 308675<\/p>\n
CVE-2026-28907: Cantina<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly crafted web content may expose sensitive user information<\/p>\n
Description: This issue was addressed with improved access restrictions.<\/p>\n
WebKit Bugzilla: 309698<\/p>\n
CVE-2026-28962: Luke Francis, Vaagn Vardanian, kwak kiyong \/ kakaogames, Vitaly Simonovich, Adel Bouachraoui, greenbynox<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly designed web content may lead to unexpected Safari crashes<\/p>\n
Description: The problem was addressed with improved memory management.<\/p>\n
WebKit Bugzilla: 307669<\/p>\n
CVE-2026-43658: Do Young Park<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly designed web content may lead to unexpected process crashes<\/p>\n
Description: The problem was addressed with improved memory management.<\/p>\n
WebKit Bugzilla: 308545<\/p>\n
CVE-2026-28905: Yuhao Hu, Yuanming Lai, Chenggang Wu, and Zhe Wang<\/p>\n
WebKit Bugzilla: 308707<\/p>\n
CVE-2026-28847: DARKNAVY (@DarkNavyOrg), Anonymous working with TrendaI Zero Day Initiative, Daniel Rhea<\/p>\n
WebKit Bugzilla: 309601<\/p>\n
CVE-2026-28904: Luka Ra\u010dki<\/p>\n
WebKit Bugzilla: 310880<\/p>\n
CVE-2026-28955: wac and Kookhwan Lee work with TrendAI Zero Day Initiative<\/p>\n
WebKit Bugzilla: 310303<\/p>\n
CVE-2026-28903: Mateusz Krzywicki (Verify.io)<\/p>\n
WebKit Bugzilla: 309628<\/p>\n
CVE-2026-28953: Maher Azzouzi<\/p>\n
WebKit Bugzilla: 309861<\/p>\n
CVE-2026-28902: Tristan Madani (@TristanInSec) from Talence Security, Nathaniel Oh (@calysteon)<\/p>\n
WebKit Bugzilla: 310207<\/p>\n
CVE-2026-28901: Aisle security research team (Joshua Rogers, Luigino Camastra, Igor Morgenstern, and Guido Vranken), Maher Azzouzi, Ngan Nguyen of Calif.io<\/p>\n
WebKit Bugzilla: 311631<\/p>\n
CVE-2026-28913: unknown researcher<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly designed web content may lead to unexpected process crashes<\/p>\n
Description: An issue with running after free was addressed with improved memory management.<\/p>\n
WebKit Bugzilla: 313939<\/p>\n
CVE-2026-28883: kwak kiyong \/ kakaogames<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: The application may have access to sensitive user data<\/p>\n
Description: This issue was addressed with improved data protection.<\/p>\n
WebKit Bugzilla: 311228<\/p>\n
CVE-2026-28958: Cantina<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly designed web content may lead to unexpected process crashes<\/p>\n
Description: An issue was addressed with improved input validation.<\/p>\n
WebKit Bugzilla: 310527<\/p>\n
CVE-2026-28917: Vitaly Simonovich<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly designed web content may lead to unexpected Safari crashes<\/p>\n
Description: An issue with running after free was addressed with improved memory management.<\/p>\n
WebKit Bugzilla: 310234<\/p>\n
CVE-2026-28947: dr3dd<\/p>\n
WebKit Bugzilla: 310544<\/p>\n
CVE-2026-28946: Gia Bui (@yabeow) from Calif.io, dr3dd, w0wbox<\/p>\n
WebKit Bugzilla: 312180<\/p>\n
CVE-2026-28942: Milad Nasr and Nicholas Carlini and Claude, Anthropic<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: A malicious iframe may use the download settings of another website<\/p>\n
Description: The issue was addressed with improved UI management.<\/p>\n
CVE-2026-28971: Khiem Tran<\/p>\n
WebKit Bugzilla: 311288<\/p>\n
Available for: macOS Sonoma and macOS Sequoia<\/p>\n
Impact: Processing poorly designed web content may lead to unexpected process crashes<\/p>\n
Description: The problem was addressed with improved memory management.<\/p>\n
WebKit Bugzilla: 311131<\/p>\n
CVE-2026-28944: Kenneth Hsu of Palo Alto Networks, J\u00e9r\u00f4me DJOUDER, dr3dd<\/p>\n<\/div>\n
If your Mac is compatible with Safari 26.5, it would be a good idea to make sure you’re running the latest version as soon as possible.<\/p>\n\n","protected":false},"excerpt":{"rendered":"
Apple has published a full list of security fixes for Safari 26.5, including a WebKit vulnerability that could allow maliciously crafted web content to expose sensitive user information. Here are the details. On that day, the company released the full security content of each update, and you can find more details about it here. Now, […]<\/p>\n","protected":false},"author":2,"featured_media":13886,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":{"0":"post-13885","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-smartphones-tablets"},"_links":{"self":[{"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/posts\/13885","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/comments?post=13885"}],"version-history":[{"count":1,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/posts\/13885\/revisions"}],"predecessor-version":[{"id":13887,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/posts\/13885\/revisions\/13887"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/media\/13886"}],"wp:attachment":[{"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/media?parent=13885"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/categories?post=13885"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.runwayritz.com\/index.php\/wp-json\/wp\/v2\/tags?post=13885"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}