CVE-2026-39872
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk9th percentile — higher than 9% of all known CVEs
Summary
A vulnerability in WebKit may lead to an unexpected process crash when processing maliciously crafted web content. The issue was addressed with improved memory handling. The fix is included in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2.
Risk Assessment
An attacker could cause an unexpected process crash, disrupting browser or WebKit-based application functionality, potentially enabling further denial-of-service attacks.
Recommendation
Immediately update Safari, iOS, iPadOS, and macOS Tahoe to version 26.5.2 or later. Users should avoid opening suspicious web content until the update is applied.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected process crash.