Luke Francis

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Improved input validation was implemented to address a flaw where a malicious website could process restricted web content outside the sandbox. A sandbox is a security mechanism for separating running programs from one another and from the system.** **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.5 macOS Tahoe versions prior to 26.5 visionOS versions prior to 26.5 **Description** Processing maliciously crafted web content may disclose sensitive user information. **Recommendations** Update iOS to version 18.7.9 or 26.5. Update iPadOS to version 18.7.9 or 26.5. Update macOS Tahoe to version 26.5. Update visionOS to version 26.5.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 147.0.7727.55 **Description** Insufficient data validation in the Media component of Google Chrome could allow a remote attacker to perform an out-of-bounds memory read using a crafted video file. Exploitation may lead to a denial-of-service. **Recommendations** Update Google Chrome to version 147.0.7727.55 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 145.0.7632.116 **Description** An out-of-bounds read issue existed in the Media component of Google Chrome. This allowed a remote attacker to potentially read memory outside of the intended boundaries by tricking a user into visiting a specially crafted HTML page. The security severity is considered high. **Recommendations** Update Google Chrome to version 145.0.7632.116 or later.