High · published December 18, 2025
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 95.2th percentile for exploit probability.
🚨 A sneaky use-after-free vulnerability in Apple's software could let attackers execute code just like flipping a switch in your home! 🔥 Think of a use-after-free issue like a restaurant where the same table gets reserved for different customers at the same time — if one customer leaves, the staff might accidentally give their table to someone else unexpectedly, leading to chaos! An attacker could exploit this vulnerability to run arbitrary code on your device, which means they could potentially access sensitive data, install malicious software, or even take control of your device entirely. It's a serious risk, especially since Apple has acknowledged attempts to exploit it in targeted attacks against specific individuals!
Think of a use-after-free issue like a restaurant where the same table gets reserved for different customers at the same time — if one customer leaves, the staff might accidentally give their table to someone else unexpectedly, leading to chaos! This use-after-free issue affects how memory is managed in Apple's operating systems, allowing maliciously crafted web content to manipulate memory and execute unauthorized commands. It's a classic case where mishandled memory leads to unexpected and disastrous consequences.
An attacker could exploit this vulnerability to run arbitrary code on your device, which means they could potentially access sensitive data, install malicious software, or even take control of your device entirely. It's a serious risk, especially since Apple has acknowledged attempts to exploit it in targeted attacks against specific individuals! To protect yourself, update to Safari 26.2, iOS 18.7.3, iPadOS 18.7.3, or the latest versions of macOS, tvOS, visionOS, and watchOS immediately. Regularly checking for updates and enabling automatic updates can also help keep your devices secure. You've got this! Stay proactive, and you'll keep those attackers at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| apple/safari | < 26.2 | 26.2 |
| apple/ipados | < 18.7.3 | 18.7.3 |
| apple/ipados | ≥ 26.0, < 26.2 | 26.2 |
| apple/iphone_os | < 18.7.3 | 18.7.3 |
| apple/iphone_os | ≥ 26.0, < 26.2 | 26.2 |
| apple/macos | ≥ 26.0, < 26.2 | 26.2 |
| apple/tvos | < 26.2 | 26.2 |
| apple/visionos | < 26.2 | 26.2 |
| apple/watchos | < 26.2 | 26.2 |