Apple Safari and WebKit vulnerabilities and fixes

CVEs that mention Apple Safari and WebKit, ranked by priority. 3 tracked.

Apple Safari and WebKit has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-08-13. Highest priority: CVE-2026-16770 (score 56/100).

• CVE-2026-16770 CRITICAL 9.8 PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the sourc
• CVE-2026-43715 HIGH 8.8 UPGRADE UPGRADE A use-after-free issue was addressed with improved memory management
• CVE-2026-17431 MEDIUM 6.1 PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in

FAQ

How do I fix Apple Safari and WebKit vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Apple Safari and WebKit being exploited right now?

None of the tracked Apple Safari and WebKit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Apple Safari and WebKit CVE should I patch first?

CVE-2026-16770 currently ranks highest (56/100): PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the sourc.

← Back to latest CVEs