CVE-2026-64778mediumCWE-200

CVE-2026-64778

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%

exploitation probability

0.3%top 76% of all CVEs

observed exploitation

nono source reports it

The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Visiting a maliciously crafted website may leak sensitive data.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Apple · iOS and iPadOS Apple · macOS Apple · Safari Apple · tvOS Apple · visionOS Apple · watchOS

References

https://support.apple.com/en-us/148281 https://support.apple.com/en-us/148282 https://support.apple.com/en-us/148286 https://support.apple.com/en-us/148287 https://support.apple.com/en-us/149036 https://support.apple.com/en-us/149037 https://support.apple.com/en-us/149038