CVE-2026-28947
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iO
CVSS
8.8
Alto
EPSS
0.4%
p32
KEV
—
Exploit Today
10
0-100
Publicado: 11 may 2026 · Última mod.: 17 ago 2026 · CWE-416
0.4%EPSS · 30 días0.4%
2026-08-232026-09-20
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.
- support.apple.comhttps://support.apple.com/en-us/127110
- support.apple.comhttps://support.apple.com/en-us/127115
- support.apple.comhttps://support.apple.com/en-us/127118
- support.apple.comhttps://support.apple.com/en-us/127119
- support.apple.comhttps://support.apple.com/en-us/127120
- support.apple.comhttps://support.apple.com/en-us/127121
- support.apple.comhttps://support.apple.com/en-us/148287
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:25918
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:25927
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:27728
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:27785
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:27804
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:28114
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:28146
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:28147
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:28148
- access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-28947
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2483964
- security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28947.json
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-940849.4 CRÍ34.2%
——10Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.2dCVE-2026-940553.7 BAJ24.4%
——7Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.2dCVE-2026-880978.1 ALT12.7%
——4Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.1dCVE-2026-935862.9 BAJ1.7%
——1ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact (e.g., a crash of the affected process). The issue is fixed in versions 7.1.2-31 and 6.9.13-56.3dCVE-2026-933828.8 ALT31.2%
——9Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2dCVE-2026-933749.6 CRÍ29.2%
——9Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)2d