Summary
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
- Vendor
- Apple
- Product
- Multiple Products
- Added to KEV
- Mar 5, 2026
- Remediation due
- Mar 26, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-190
- EPSS
- 7.0% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References