CVE-2026-28847
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Idan Masas, DARKNAVY (@DarkNavyOrg), Anonymous working with TrendAI Zero Day Initiative, Daniel Rhea
| Attribute | Value |
|---|---|
| CVE | CVE-2026-28847 |
| Bugzilla | 308707 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | e5368156542a8414… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/JavaScriptCore/yarr/RegularExpression.cpp
Test Files
Tools/TestWebKitAPI/CMakeLists.txtTools/TestWebKitAPI/Tests/JavaScriptCore/RegularExpression.cpp