CVE-2026-28955
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: wac and Kookhwan Lee working with TrendAI Zero Day Initiative
| Attribute | Value |
|---|---|
| CVE | CVE-2026-28955 |
| Bugzilla | 310880 |
| Component | WebCore |
| Bug Class | LogicError |
| Severity | medium |
| Commit | 5233199dcb0cd58c… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved memory handling.
Files Changed
Source Files
Source/WebCore/inspector/agents/InspectorCSSAgent.cpp