CVE-2026-65335
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Researchers: OpenAI Codex Security - Amy Burnett
| Attribute | Value |
|---|---|
| CVE | CVE-2026-65335 |
| Bugzilla | 316723 |
| Component | JSC |
| Bug Class | LogicError |
| Severity | medium |
| Commit | d74d692503fce0f3… |
| Advisory | Apple Advisory |
Root Cause Analysis
This issue was addressed through improved state management.
Files Changed
Source Files
Source/JavaScriptCore/dfg/DFGStrengthReductionPhase.cppSource/JavaScriptCore/runtime/RegExp.cppSource/JavaScriptCore/runtime/RegExp.hSource/JavaScriptCore/runtime/RegExpCache.cpp
Test Files
JSTests/stress/new-regexp-untyped-soft-invalid-stale-captures.js