CVE-2016-10226

Name of the Vulnerable Software and Affected Versions Safari Technology Preview Release 18

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via crafted JavaScript code. This is related to the mishandling of code in the operatorString function, and involves files such as MacroAssemblerARM64.h, MacroAssemblerX86Common.h, and WasmB3IRGenerator.cpp.

Recommendations For Safari Technology Preview Release 18, consider avoiding the execution of crafted JavaScript code until a fix is available. As a temporary workaround, restricting JavaScript execution may help minimize the risk of exploitation.