Skip to content
OpenAdvisories
Medium · 4.3 Public exploit CVE-2026-65351 EUVD-2026-60508GHSA-vqhq-xrg7-4pc8

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.…

Published Aug 17, 2026 · Updated Oct 26, 2026 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: Safari Product: visionOS Package: webkit2gtk Package: wpewebkit Platform: iOS Platform: macOS Category: Browsers Ecosystem: Debian

Description

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected products

VendorProductAffectedFixed
Apple Safari < 26.6.1 26.6.1
Apple iOS and iPadOS < 18.7.10, < 26.6.1 18.7.10
Apple macOS < 26.6.2 26.6.2
Apple visionOS < 27 27

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 webkit2gtk No fix yet —
Debian 14 wpewebkit 2.54.0-1 —
Debian 13 webkit2gtk 2.54.0-1~deb13u1 —
Debian 13 wpewebkit No fix yet —
Debian 12 wpewebkit +1 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 webkit2gtk3 +3 2.54.0-1.el9_8 RHSA-2026:69098
RHEL 8 webkit2gtk3 +3 2.54.0-1.el8_10 RHSA-2026:74084

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 webkit2gtk3 +3 2.54.0-1.el9_8 ALSA-2026:69098
AlmaLinux 8 webkit2gtk3 +3 2.54.0-1.el8_10 ALSA-2026:74084

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 webkit2gtk3 2.54.0-1.el9_8 RLSA-2026:69098
Rocky Linux 8 webkit2gtk3 2.54.0-1.el8_10 RLSA-2026:74084

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 webkit2gtk3 2.54.1-150600.12.81.3 SUSE-SU-2026:4858-1
SLES 15 SP7 webkit2gtk4 +1 2.54.1-150600.12.81.4 SUSE-SU-2026:4858-1
SLES 15 SP6 webkit2gtk3 2.54.1-150600.12.81.3 SUSE-SU-2026:4858-1
SLES 15 SP6 webkit2gtk4 +1 2.54.1-150600.12.81.4 SUSE-SU-2026:4858-1
SLES 15 SP5 webkit2gtk3 +2 2.54.1-150400.4.152.2 SUSE-SU-2026:4676-1
SLES 15 SP4 webkit2gtk3 +2 2.54.1-150400.4.152.2 SUSE-SU-2026:4676-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 webkit2gtk3 +1 2.54.1-160000.1.1 SUSE-SU-2026:24225-1
SLES for SAP 15 SP6 webkit2gtk3 2.54.1-150600.12.81.3 SUSE-SU-2026:4858-1
SLES for SAP 15 SP6 webkit2gtk4 +1 2.54.1-150600.12.81.4 SUSE-SU-2026:4858-1
SLES for SAP 15 SP5 webkit2gtk3 +2 2.54.1-150400.4.152.2 SUSE-SU-2026:4676-1
SLES for SAP 15 SP4 webkit2gtk3 +2 2.54.1-150400.4.152.2 SUSE-SU-2026:4676-1
SLES 16.0 webkit2gtk3 +1 2.54.1-160000.1.1 SUSE-SU-2026:24225-1
SLE HPC 15 SP5 webkit2gtk3 +2 2.54.1-150400.4.152.2 SUSE-SU-2026:4676-1
SLE HPC 15 SP4 webkit2gtk3 +2 2.54.1-150400.4.152.2 SUSE-SU-2026:4676-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 webkit2gtk3 +2 2.54.1-160000.1.1 openSUSE-SU-2026:22076-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 webkitgtk4 +3 2.54.0-1.amzn2.0.1 ALAS2-2026-3987

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 webkit2gtk3 +3 2.54.0-1.el9_8 ELSA-2026-69098
Oracle Linux 8 webkit2gtk3 +3 2.54.0-1.el8_10 ELSA-2026-74084

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 16

References