Multiple Vulnerabilities Discovered in macOS Tahoe and WebKit

Recent vulnerabilities have been identified in macOS Tahoe and WebKit, affecting users who interact with malicious web content. Key issues include improper access control, buffer overflows, and use-after-free vulnerabilities, with CVEs such as CVE-2026-74990, CVE-2026-65346, and CVE-2026-65347. Attackers can exploit these vulnerabilities to execute arbitrary code, escalate privileges, or perform denial-of-service attacks. The vulnerabilities require user interaction, such as visiting a specially crafted website or opening a malicious file. The CVSS scores for these vulnerabilities range from 4.6 to 9.3, indicating varying levels of severity. Users and organizations are urged to apply patches and remain vigilant against potential exploits.

Key Points: • Multiple vulnerabilities in macOS Tahoe and WebKit pose significant risks to users. • CVE-2026-74990 and CVE-2026-65346 allow remote code execution and privilege escalation. • User interaction is required for exploitation, emphasizing the need for cautious browsing.