Use-After-Free Vulnerability in Safari on macOS by Apple
CVE-2026-28946

Currently unrated

Key Information:

Vendor: Apple
Status: Mac OS
Vendor: CVE Published:; 11 May 2026

What is CVE-2026-28946?

A use-after-free vulnerability in Safari allows maliciously crafted web content to exploit memory management flaws, potentially causing the browser to crash unexpectedly. Users of macOS Tahoe 26.5 are advised to update to the latest version to mitigate this risk.

Affected Version(s)

macOS 0 < 26.5

References

https://support.apple.com/en-us/127115

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 11, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28946 Data

JSON