Safari/WebKit Security Update: Multiple CVE Fixes (Memory Corruption/Crash)

Vulnerability Overview Safari 26.6.1 includes multiple security fixes, primarily involving the WebKit component. These fixes aim to resolve vulnerabilities that could lead to Safari crashes, memory corruption, sensitive data disclosure, and other issues. Affected Systems Operating System: macOS Sonoma and macOS Sequoia Component: WebKit Remediation 1. WebKit Vulnerability Fixes - CVE-2026-64784: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Out-of-bounds access issue resolved by improving bounds checking. - WebKit Bugzilla: 317632 - Contributors: Janggoo Lee (Out of Bounds, OpenAI Codex Security - Amy Burnett) - CVE-2026-43795: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving memory handling. - WebKit Bugzilla: 313452 - Contributors: wwwlk - CVE-2026-65338: Addressed an issue where processing maliciously crafted web content could lead to memory corruption. - Description: Issue resolved by improving memory handling. - WebKit Bugzilla: 318405 - Contributors: Henock Habte - CVE-2026-64782: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Memory corruption vulnerability resolved by improving locking mechanisms. - WebKit Bugzilla: 321480 - Contributors: Seonwook Kim, Shubham Chaskar, lattice, Josef Korbel - CVE-2026-64781: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving input validation. - WebKit Bugzilla: 321484 - Contributors: Thomas Guillem - CVE-2026-65351: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 321517 - Contributors: Niels Hofmans - CVE-2026-65340: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 316906 - Contributors: Claudio Bozzato and Francesco Benvenuto (Cisco Talos, Josef Korbel (Citadel)) - CVE-2026-65337: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 317349 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-65336: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 316723 - Contributors: Josef Korbel - CVE-2026-65335: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 317603 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-65333: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 317450 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-65332: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 317611 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-65331: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving state management. - WebKit Bugzilla: 317611 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-64715: Addressed an issue where processing maliciously crafted web content could lead to unexpected process crashes. - Description: Use-after-free issue resolved by improving memory management. - WebKit Bugzilla: 316347 - Contributors: Hossein Lotfi (@hosselet) of TrendAI Zero Day Initiative - CVE-2026-64780: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Issue resolved by improving checks. - WebKit Bugzilla: 316918 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-65334: Addressed an issue where processing maliciously crafted web content could lead to unexpected Safari crashes. - Description: Memory corruption issue resolved by improving state management. - WebKit Bugzilla: 316791 - Contributors: OpenAI Codex Security - Amy Burnett - CVE-2026-43794: Addressed an issue where processing maliciously crafted web content could lead to memory corruption. - Description: Issue resolved by improving memory handling. - WebKit Bugzilla: 317317 - Contributors: Dung Do (@_piers2) of Calit.io - CVE-2026-64787: Addressed an issue where processing mali

Goal Reached Thanks to every supporter — we hit 100%!

Safari/WebKit Security Update: Multiple CVE Fixes (Memory Corruption/Crash)