GCVE-1988-2026-0399

Vulnerability from gna-1988 – Published: 2026-10-02 04:57 – Updated: 2026-10-02 04:57
VLAI
Title
APPLE-SA-09-14-2026-9 Safari 27
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-09-14-2026-9 Safari 27 Safari 27 addresses the following issues. Information about the security content is also available at https://support.apple.com/149039. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Safari Available for: macOS Sequoia and macOS Tahoe Impact: A malicious website may be able to determine what apps a user has installed Description: This issue was addressed through improved state management. CVE-2026-84518: Bálint Magyar (balintmagyar.com) Safe Browsing Available for: macOS Sequoia and macOS Tahoe Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-86897: Stuart Wallace WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A logic issue was addressed with improved state management. WebKit Bugzilla: 310457 CVE-2026-84635: Souta Sugiyama WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may disclose sensitive user information Description: A permissions issue was addressed by removing the vulnerable code. WebKit Bugzilla: 315121 CVE-2026-64753: Viggo Lekdorf WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Opening a maliciously crafted webarchive file may lead to universal cross-site scripting Description: A logic issue was addressed with improved state management. WebKit Bugzilla: 3182711 CVE-2026-86898: Tomi Garcia (archyxsec) WebKit Canvas Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 313935 CVE-2026-64718: Niels Hofmans, OGINOME Tomohito, an anonymous researcher Additional recognition Safari We would like to acknowledge Dem0ns @天府简易信工作室 for their assistance. Safari Downloads We would like to acknowledge Barath Stalin K (linkedin.com/in/barathstalin), Exell Nakano, Manojkumar Jaganathan (linkedin.com/in/manojkumar-j-7ba35b202/) with HackerBro Technologies, Praditya Fajar Ramadhan, Zhiyang Zeng (@Wester), shobhit srivastav for their assistance. WebKit We would like to acknowledge @TristanInSec, Behzad Najjarpour Jabbari (@_G4ru_), Big Bear, Eddy Tsalolikhin, Henock Habte, Kenneth Hsu, Maher Azzouzi, Meridian Miftari, N13S, OpenAI Codex Security - Amy Burnett, Souta Sugiyama, Vitaly Simonovich, an anonymous researcher, hamayanhamayan, lattice, lebr0nli of National Yang Ming Chiao Tung University, Security and Systems Lab, ret2happy, wwwlk for their assistance. WebKit Canvas We would like to acknowledge Utkarsh Pal for their assistance. WebKit JavaScript Bindings We would like to acknowledge hamayanhamayan for their assistance. Safari 27 may be obtained from the Mac App Store. All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmqoYtAACgkQ4Ifiq8DH 7PVIahAAuV156HhzFODrPZh3bAOjuSXNvTNysYfs/wL+GLASjJ9wg1wiKQZ9HQBx d24Zs6y9JCQ4B2QmLfh2ahEpOJJCShkMX+o0l1blm1pX1leRCSXl/Ege1u5YvF6j B6ZNCAda3Mrv0fSIwxpGZ2/jI1GtUUoJ2CJEKNhas5o4AfRkF42yfr0HkcK6AYCS 0xC5EMmT8g+OVWdKx8/bfT6OW4BoxirW3ApFkgnySXWnq2aqyNZWPKXIwGq4AeCZ siEm2ncjsntfbILVmVfsDdBoRVyrcqu+Kc7quiw4hrXS7sL43aVw8Wi6FXEcXWVp 2L8M/NrGo3ZrWaqDTwjXQ09aVkxqkWHBqs2bSYMcdJNK4eVHfAQcaNPGzF1Pppso E/HvBzmas6wT4ecekS5zqvmgH67MfIJnmWtAyWtNrfeEPhm/AF8L9zMcQdzjmtRi LdxfV5wJrboSMegfhuTDgmVN4so6aVsXkDbMZhrkDuJVB7n2aQp6OnhuUwHCGIdV 0dXR9cptSaG47hz6E/NEFnyWG/7hpCtUgGI8mnFqJLgfRCHhGrMWSc4Ryu7q2Chl wfIuvHDI0TnhOfZJ8ZAqO0oospzK457r+dwkGAKm3ok/EL0zZuvUNi1p0goO5Xox +we6JHCyUBoEK8ioVEwLWbw2jdH62PRUlQmdiPAriJgFIen9x5c= =J8zV -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
unknown Safari 27 Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0399 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari 27",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-09-14-2026-9 Safari 27\n\nSafari 27 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149039.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nSafari\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: A malicious website may be able to determine what apps a user\nhas installed\nDescription: This issue was addressed through improved state management.\nCVE-2026-84518: B\u00e1lint Magyar (balintmagyar.com)\n\nSafe Browsing\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-86897: Stuart Wallace\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A logic issue was addressed with improved state management.\nWebKit Bugzilla: 310457\nCVE-2026-84635: Souta Sugiyama\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may disclose\nsensitive user information\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nWebKit Bugzilla: 315121\nCVE-2026-64753: Viggo Lekdorf\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Opening a maliciously crafted webarchive file may lead to\nuniversal cross-site scripting\nDescription: A logic issue was addressed with improved state management.\nWebKit Bugzilla: 3182711\nCVE-2026-86898: Tomi Garcia (archyxsec)\n\nWebKit Canvas\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected Safari crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 313935\nCVE-2026-64718: Niels Hofmans, OGINOME Tomohito, an anonymous researcher\n\nAdditional recognition\n\nSafari\nWe would like to acknowledge Dem0ns @\u5929\u5e9c\u7b80\u6613\u4fe1\u5de5\u4f5c\u5ba4 for their assistance.\n\nSafari Downloads\nWe would like to acknowledge Barath Stalin K\n(linkedin.com/in/barathstalin), Exell Nakano, Manojkumar Jaganathan\n(linkedin.com/in/manojkumar-j-7ba35b202/) with HackerBro Technologies,\nPraditya Fajar Ramadhan, Zhiyang Zeng (@Wester), shobhit srivastav for\ntheir assistance.\n\nWebKit\nWe would like to acknowledge @TristanInSec, Behzad Najjarpour Jabbari\n(@_G4ru_), Big Bear, Eddy Tsalolikhin, Henock Habte, Kenneth Hsu, Maher\nAzzouzi, Meridian Miftari, N13S, OpenAI Codex Security - Amy Burnett,\nSouta Sugiyama, Vitaly Simonovich, an anonymous researcher,\nhamayanhamayan, lattice, lebr0nli of National Yang Ming Chiao Tung\nUniversity, Security and Systems Lab, ret2happy, wwwlk for their\nassistance.\n\nWebKit Canvas\nWe would like to acknowledge Utkarsh Pal for their assistance.\n\nWebKit JavaScript Bindings\nWe would like to acknowledge hamayanhamayan for their assistance.\n\nSafari 27 may be obtained from the Mac App Store.\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\n+we6JHCyUBoEK8ioVEwLWbw2jdH62PRUlQmdiPAriJgFIen9x5c=\n=J8zV\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:32Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/61"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/61"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149039"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/61"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-09-14-2026-9 Safari 27",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-64718",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64753",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84518",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84635",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86898",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0399",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/61",
            "automated": true,
            "contentSha256": "8bd3a31237ff858ececd127342ef86739f8bbd9c77784d17971469820a7d72ed",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/61",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-14T22:09:41Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0399"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:32Z",
    "dateUpdated": "2026-10-02T04:57:32Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0399"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.