Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
Outdated Cache Pointers Can Leak Sensitive Data or Crash Safari
CVE-2026-3777
Summary
Safari's internal cache can be exploited by malicious JavaScript, potentially leading to data exposure or a browser crash. Affected users should update to the latest version of Safari to ensure their cache is properly managed and secure.
Original title
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom prope...
Original description
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers are still kept and later dereferenced, which under crafted JavaScript and document structures can lead to a use-after-free condition and potentially allow arbitrary code execution.
nvd CVSS3.1
5.5
Vulnerability type
CWE-416
Use After Free
Published: 1 Apr 2026 · Updated: 1 Apr 2026 · First seen: 1 Apr 2026