VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 20 hours ago

CVE-2026-64719

8.1 High Not applicable

Published 50 days ago. NVD backfills CPE data for days or weeks after publication, and OSV and the exploit indexes lag too. Scope and status here may change.

Description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CWE-125 · Out-of-bounds read

Exploitation Status

No public exploit

Nothing published shows this CVE being exploited, which is not the same as ruling it out.

CVSS E:U

  • CISA KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC none indexed
  • EPSS 0.41% chance in 30 days

Waratek Defense Posture

Not applicable

Not a Java vulnerability. Outside ARMR's domain entirely.

  • Protection none
  • Action not-needed none
  • Review automated upstream-data
  • Record active
Decided by unmatched-product : No tracked product matched above, and none present at all
Finding Affected products (apple/safari, apple/ipados, apple/iphone_os, apple/macos, apple/tvos, apple/visionos, apple/watchos) are not in our known products list

CVSS

8.1 HIGH v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 1 metric

VRT selects the newest version's highest entry and publishes it as cvssScore, newest rather than largest because scores are not comparable across versions, and highest rather than first because the first entry is frequently a CNA placeholder scoring 0.0 over NVD's own analysis.

VersionScoreBandVectorAssignerType
CVSS 3.1 8.1 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CISA-ADP Secondary published

Affected Software & Releases

🖥️ Product CPEs & Version Ranges

7 product(s) over 7 version claims (uncapped)
SourceVendorProductSchemeAffected Versions
nvd apple ipados generic ＜ 26.6
nvd apple iphone os generic ＜ 26.6
nvd apple macos generic ≥ 26.0 and ＜ 26.6
nvd apple safari generic ＜ 26.6
nvd apple tvos generic ＜ 26.6
nvd apple visionos generic ＜ 26.6
nvd apple watchos generic ＜ 26.6

References

URLTags
https://support.apple.com/en-us/128066 Release Notes, Vendor Advisory
https://support.apple.com/en-us/128067 Release Notes, Vendor Advisory
https://support.apple.com/en-us/128068 Release Notes, Vendor Advisory
https://support.apple.com/en-us/128069 Release Notes, Vendor Advisory
https://support.apple.com/en-us/128070 Release Notes, Vendor Advisory
https://support.apple.com/en-us/128073 Release Notes, Vendor Advisory
https://support.apple.com/en-us/148287

Timeline

Published 2026-07-27 Last modified 2026-08-17
Published2026-07-27By the CVE Program.
NVD record modified2026-08-17NVD's own last-modified date for this record.