Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2026-65412: Apple devices can freeze when displaying certain web content
CVE-2026-65412 · published 1 month ago
Summary
iOS, iPadOS, macOS, visionOS and watchOS versions prior to the latest updates may stop responding if they process specially crafted web pages. This happens because the software could try to use a missing piece of data, causing it to crash. Updating each operating system to the newest version resolves the issue, so apply the latest patches as soon as possible.
What to do
- Update apple ios and ipados to version 26.7 or later.
- Update apple macos to version 15.8 or later.
- Update apple visionos to version 27 or later.
- Update apple watchos to version 27 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ios and ipados | < 26.7 |
| apple | macos | < 15.8 |
| apple | visionos | < 27 |
| apple | watchos | < 27 |
Original advisory text
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe...
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.5
Medium
Type
CWE-476NULL Pointer Dereference
Timeline
Published14 Sep 2026
Updated4 Nov 2026
First seen14 Sep 2026
Track software like this
Free during beta