PT-2026-39797 · Apple · Safari+1

Dr3Dd + 3 · Published 2026-05-11 · Updated 2026-05-16 · CVE-2026-28946

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Safari versions prior to macOS Tahoe 26.5

Description A use-after-free issue, which occurs when a program continues to use a memory address after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Recommendations Update to macOS Tahoe 26.5.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-28946

Affected Products

Apple Macos

Safari

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-28946 · Security Note
• https://support.apple.com/en-us/127115 · Vendor Advisory
• https://twitter.com/f1tym1/status/2055626640265208114 · Twitter Post
• https://support.apple.com/en-us/127121 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28946 · Note