Search: “JavaScriptCore”

16 items

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 8 Vulnerability 5 Malware 2 Ransomware 1

SeverityAll critical 14 high 1 medium 1 low 0 info 0

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

ZDI details a use-after-free in Apple Safari's JavaScriptCore (CVE-2026-64715) that allows remote code execution after a user visits a malicious page.

The Zero Day Initiative published advisory ZDI-26-610 for a use-after-free in the B3 ReduceStrength phase of Apple Safari's JavaScriptCore. Successful exploitation allows remote attackers to execute arbitrary code, but user interaction is required, such as visiting a malicious page or opening a malicious file. ZDI rates the vulnerability 8.8 on CVSS and assigned CVE-2026-64715. The advisory does not report exploitation in the wild.

ZDI Published AdvisoriesAug 24, 05:00 UTC · 23d agoVulnerability CVE-2026-64715

Search: “JavaScriptCore”

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

New iPhone Exploit Uses Four Zero-Days

4-year campaign backdoored iPhones using possibly the most advanced exploit ever

Operation Triangulation: The last (hardware) mystery

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero

Apple Issues Emergency Security Update for Actively Exploited Flaws

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge

DarkSword emerges as powerful iOS exploit tool in global attacks

Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets

U.S. CISA adds Oracle, Windows, Kentico, Apple flaws to its Known Exploited Vulnerabilities catalog

Apple fixes 2 zero-days exploited to breach macOS systems (CVE-2024-44309, CVE-2024-44308)

U.S. CISA adds Apple, Oracle Agile PLM bugs to its Known Exploited Vulnerabilities catalog

Apple Releases Urgent Updates to Patch Actively Exploited Zero

Apple addressed two actively exploited zero

Google aims to improve security of browser engines, third-party Android devices and apps on Google Play