Eternalsakura13

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A path handling issue exists where processing maliciously crafted web content may disclose sensitive user information. This is caused by insufficient validation during path processing. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Processing maliciously crafted web content may lead to an unexpected Safari crash due to a stack overflow, which occurs when a program exceeds its allocated stack memory. This issue was addressed by improving input validation. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 visionOS versions prior to 26.3 Safari versions prior to 26.3 **Description** The software contains a flaw due to improper state management. Processing specially crafted web content can cause the application to unexpectedly crash. **Recommendations** Update macOS to version Tahoe 26.3. Update iOS to version 18.7.5. Update iPadOS to version 18.7.5. Update visionOS to version 26.3. Update Safari to version 26.3.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 visionOS versions prior to 26.3 Safari versions prior to 26.3 **Description** The software contains an issue related to memory handling. Processing specially crafted web content may cause the software to unexpectedly crash. **Recommendations** Update macOS to version 26.3. Update iOS to version 18.7.5. Update iPadOS to version 18.7.5. Update visionOS to version 26.3. Update Safari to version 26.3.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2 **Description** A flaw exists due to improper memory handling when processing specially designed web content. This can result in an unexpected application crash. **Recommendations** Update Safari to version 26.2. Update iOS to version 18.7.3. Update iPadOS to version 18.7.3. Update macOS Tahoe to version 26.2. Update visionOS to version 26.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 Safari versions prior to 26.2 **Description** A memory management flaw exists due to a use-after-free condition. Processing specially designed web content could cause the application to crash unexpectedly. **Recommendations** Update macOS to version Tahoe 26.2. Update iOS to version 18.7.3. Update iPadOS to version 18.7.3. Update Safari to version 26.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.1 iPadOS versions prior to 26.1 Safari versions prior to 26.1 visionOS versions prior to 26.1 **Description** The software contains an issue addressed by disabling array allocation sinking. Processing maliciously crafted web content may lead to an unexpected process crash. **Recommendations** Update to iOS version 26.1 or later. Update to iPadOS version 26.1 or later. Update to Safari version 26.1 or later. Update to visionOS version 26.1 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.1 visionOS versions prior to 26.1 watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 **Description** Processing maliciously crafted web content may lead to an unexpected process crash. **Recommendations** Update Safari to version 26.1. Update visionOS to version 26.1. Update watchOS to version 26.1. Update iOS to version 26.1. Update iPadOS to version 26.1. Update tvOS to version 26.1.

**Name of the Vulnerable Software and Affected Versions** Safari (affected versions not specified) **Description** The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. **Recommendations** Update to watchOS 11.6. Update to iOS 18.6. Update to iPadOS 18.6. Update to tvOS 18.6. Update to macOS Sequoia 15.6. Update to visionOS 2.6.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (Chromium-based) (affected versions not specified) Description: The issue allows an unauthorized attacker to execute code over a network due to a 'type confusion' vulnerability in Microsoft Edge (Chromium-based), enabling remote code execution. This vulnerability permits remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (Chromium-based) (affected versions not specified) Description: The issue involves an out-of-bounds read in Microsoft Edge (Chromium-based), allowing an unauthorized attacker to execute code over a network. This can potentially enable remote code execution. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to a use after free condition in Microsoft Edge (Chromium-based), allowing an authorized attacker to execute code over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to a 'type confusion' problem, which allows an unauthorized attacker to execute code over a network. This is due to the access of a resource using an incompatible type in Microsoft Edge (Chromium-based). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 134.0.6998.35 **Description** The issue is an out-of-bounds read in the V8 JavaScript engine in Google Chrome, allowing a remote attacker to perform out-of-bounds memory access via a crafted HTML page. This has a high security severity according to Chromium. The vulnerability could lead to severe consequences for users who do not update their browsers in a timely manner, including potential sandbox escapes and arbitrary code execution. However, there are no reported active exploitations of this issue. **Recommendations** For Google Chrome versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to address the out-of-bounds read vulnerability in the V8 JavaScript engine. As a temporary workaround, consider restricting access to potentially vulnerable web pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 134.0.6998.88 **Description** A type confusion issue exists in the V8 JavaScript engine. This flaw allows a remote attacker to potentially cause heap corruption—a condition where memory is incorrectly allocated or overwritten—via a specially crafted HTML page. Successful exploitation could lead to arbitrary code execution, denial of service, or information disclosure. **Recommendations** Update to version 134.0.6998.88 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue allows remote code execution. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to a remote code execution problem. It is associated with data type confusion errors in the browser. Exploitation of this issue could allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to insufficient granularity of address spaces protected by register blocking, which can be exploited by a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to a remote code execution problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.