GCVE-1988-2026-0399

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari 27",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-09-14-2026-9 Safari 27\n\nSafari 27 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149039.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nSafari\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: A malicious website may be able to determine what apps a user\nhas installed\nDescription: This issue was addressed through improved state management.\nCVE-2026-84518: Bálint Magyar (balintmagyar.com)\n\nSafe Browsing\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-86897: Stuart Wallace\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A logic issue was addressed with improved state management.\nWebKit Bugzilla: 310457\nCVE-2026-84635: Souta Sugiyama\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may disclose\nsensitive user information\nDescription: A permissions issue was addressed by removing the\nvulnerable code.\nWebKit Bugzilla: 315121\nCVE-2026-64753: Viggo Lekdorf\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Opening a maliciously crafted webarchive file may lead to\nuniversal cross-site scripting\nDescription: A logic issue was addressed with improved state management.\nWebKit Bugzilla: 3182711\nCVE-2026-86898: Tomi Garcia (archyxsec)\n\nWebKit Canvas\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected Safari crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 313935\nCVE-2026-64718: Niels Hofmans, OGINOME Tomohito, an anonymous researcher\n\nAdditional recognition\n\nSafari\nWe would like to acknowledge Dem0ns @天府简易信工作室 for their assistance.\n\nSafari Downloads\nWe would like to acknowledge Barath Stalin K\n(linkedin.com/in/barathstalin), Exell Nakano, Manojkumar Jaganathan\n(linkedin.com/in/manojkumar-j-7ba35b202/) with HackerBro Technologies,\nPraditya Fajar Ramadhan, Zhiyang Zeng (@Wester), shobhit srivastav for\ntheir assistance.\n\nWebKit\nWe would like to acknowledge @TristanInSec, Behzad Najjarpour Jabbari\n(@_G4ru_), Big Bear, Eddy Tsalolikhin, Henock Habte, Kenneth Hsu, Maher\nAzzouzi, Meridian Miftari, N13S, OpenAI Codex Security - Amy Burnett,\nSouta Sugiyama, Vitaly Simonovich, an anonymous researcher,\nhamayanhamayan, lattice, lebr0nli of National Yang Ming Chiao Tung\nUniversity, Security and Systems Lab, ret2happy, wwwlk for their\nassistance.\n\nWebKit Canvas\nWe would like to acknowledge Utkarsh Pal for their assistance.\n\nWebKit JavaScript Bindings\nWe would like to acknowledge hamayanhamayan for their assistance.\n\nSafari 27 may be obtained from the Mac App Store.\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple's Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n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\n+we6JHCyUBoEK8ioVEwLWbw2jdH62PRUlQmdiPAriJgFIen9x5c=\n=J8zV\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives & RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-02T04:57:32Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/61"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/61"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149039"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/61"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-09-14-2026-9 Safari 27",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-64718",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64753",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84518",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84635",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86898",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0399",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/61",
            "automated": true,
            "contentSha256": "8bd3a31237ff858ececd127342ef86739f8bbd9c77784d17971469820a7d72ed",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/61",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-14T22:09:41Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-10-02T04:57:32Z",
    "dateUpdated": "2026-10-02T04:57:32Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0399"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}