CVE-2025-46299

A

memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may disclose internal states of the app.

References
Link Resource
https://support.apple.com/en-us/125884 Release Notes Vendor Advisory
https://support.apple.com/en-us/125886 Release Notes Vendor Advisory
https://support.apple.com/en-us/125889 Release Notes Vendor Advisory
https://support.apple.com/en-us/125890 Release Notes Vendor Advisory
https://support.apple.com/en-us/125891 Release Notes Vendor Advisory
https://support.apple.com/en-us/125892 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

14 Jan 2026, 17:45

Type Values Removed Values Added
CPE cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
First Time Apple macos
Apple
Apple iphone Os
Apple watchos
Apple tvos
Apple safari
Apple ipados
Apple visionos
References () https://support.apple.com/en-us/125884 - () https://support.apple.com/en-us/125884 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/125886 - () https://support.apple.com/en-us/125886 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/125889 - () https://support.apple.com/en-us/125889 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/125890 - () https://support.apple.com/en-us/125890 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/125891 - () https://support.apple.com/en-us/125891 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/125892 - () https://support.apple.com/en-us/125892 - Release Notes, Vendor Advisory

09 Jan 2026, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-09 22:15

Updated : 2026-01-14 17:45


NVD link : CVE-2025-46299

Mitre link : CVE-2025-46299

CVE.ORG link : CVE-2025-46299


JSON object : View

CWE
CWE-284

Improper Access Control