{
 "schema_version": "1.0",
 "generated_at": "2026-11-07T18:30:10Z",
 "last_checked": "2026-11-07T17:33:08+00:00",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "product": {
  "slug": "safari",
  "name": "Safari",
  "short_name": "Safari",
  "page_url": "https://patchgap.ai/is-my-safari-up-to-date/",
  "minimum_safe_version": "26.2",
  "minimum_safe_version_source": [
   {
    "url": "https://support.apple.com/en-us/125892",
    "title": "Apple: About the security content of Safari 26.2",
    "date": "2025-12-12",
    "kind": "vendor"
   }
  ],
  "baseline": {
   "version": "26.2",
   "applies_to": "all platforms listed for this product",
   "source_incident": "apple-webkit-attacked-bug-dec-2025",
   "sources": [
    {
     "url": "https://support.apple.com/en-us/125892",
     "title": "Apple: About the security content of Safari 26.2",
     "date": "2025-12-12",
     "kind": "vendor"
    }
   ],
   "covers_everything_listed": false,
   "caveats": [
    "These are fixed by an update without one version number we can compare, so check their pages: macos-27-2-security-updates-oct-26."
   ],
   "text": "You're covered against every problem here that has a version number if you're on Safari 26.2 or newer."
  },
  "update_steps": {
   "macos": [
    "Apple menu > System Settings > General > Software Update.",
    "Install any Safari or macOS update it offers."
   ]
  },
  "last_checked": "2026-11-07T17:33:08+00:00",
  "vendor": "Apple",
  "category": "browsers",
  "platforms": [
   "macos"
  ],
  "what_it_is": "The web browser that comes with every Mac.",
  "url": "https://patchgap.ai/is-my-safari-up-to-date/",
  "json_url": "https://patchgap.ai/products/safari.json",
  "official_site": "https://www.apple.com/safari",
  "official_download": "https://support.apple.com/en-us/108382",
  "how_it_updates": "Safari updates come with macOS updates (and sometimes on their own) in System Settings > General > Software Update.",
  "check": {
   "macos": {
    "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
    "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
    "shell": "Terminal",
    "read_only": true
   }
  },
  "open_incidents": [
   "apple-webkit-attacked-bug-dec-2025",
   "apple-webkit-pointer-auth-cve-2024-27834",
   "macos-27-2-security-updates-oct-26"
  ]
 },
 "incidents": [
  {
   "id": "apple-webkit-attacked-bug-dec-2025",
   "url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025/",
   "path": "/incidents/apple-webkit-attacked-bug-dec-2025/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-attacked-bug-dec-2025.json",
   "title": "Safari, Mac and iPhone: a web page bug was used in targeted attacks",
   "category": "mac",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "macos",
    "safari",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "Apple says it may have been used in an extremely sophisticated attack against specific people. CISA lists it as used in real attacks (added Dec 15, 2025).",
   "exploited_source_url": "https://support.apple.com/en-us/125886",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2025-12-12",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2025-43529",
    "CVE-2025-14174"
   ],
   "summary": "A bug in WebKit, the engine that shows web pages in Safari and every iPhone browser, let a booby-trapped web page run code on the device. Apple says it was used against specific people. Apple fixed it on December 12, 2025.",
   "am_i_affected": "You are at risk if your Mac runs macOS Tahoe older than 26.2 and Safari older than 26.2, or your iPhone runs iOS 26 older than 26.2.",
   "action": "Update macOS, Safari and iPhone (26.2 or newer)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Tahoe before 26.2",
     "fixed_version": "26.2 (Tahoe)",
     "fixed_min": null,
     "fix_note": "On older macOS (Sequoia, Sonoma), installing Safari 26.2 fixes it.",
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125886",
      "https://support.apple.com/en-us/125892"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 26.2",
     "fixed_version": "26.2",
     "fixed_min": "26.2",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125892"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS and iPadOS 26 before 26.2",
     "fixed_version": "iOS 26.2",
     "fixed_min": "26.2",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/125884"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Install the update it offers.",
    "Restart your Mac when asked.",
    "On iPhone or iPad: Settings > General > Software Update."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/125886",
     "title": "Apple: About the security content of macOS Tahoe 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125892",
     "title": "Apple: About the security content of Safari 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/125884",
     "title": "Apple: About the security content of iOS 26.2 and iPadOS 26.2",
     "date": "2025-12-12",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2025-43529 (added 2025-12-15)",
     "date": "2025-12-15",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43529",
     "title": "NVD: CVE-2025-43529",
     "date": "2025-12-12",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "apple-webkit-pointer-auth-cve-2024-27834",
   "url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "path": "/incidents/apple-webkit-pointer-auth-cve-2024-27834/",
   "json_url": "https://patchgap.ai/incidents/apple-webkit-pointer-auth-cve-2024-27834.json",
   "title": "Mac, Safari, and iPhone: CISA says an old Apple bug is being used in real attacks. Update if you missed May 2024 fixes.",
   "category": "browsers",
   "platforms": [
    "macos",
    "ios"
   ],
   "products": [
    "safari",
    "macos",
    "iphone-ios"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Patch Gap rating: high, because CISA lists it as used in real attacks (we do not copy a score we have not checked).",
   "exploited_in_wild": "yes",
   "exploited_note": "CISA lists it as used in real attacks (added Nov 4, 2026).",
   "exploited_source_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2024-05-13",
   "updated_at": "2026-11-04",
   "cves": [
    "CVE-2024-27834"
   ],
   "summary": "Apple fixed a browser engine bug in May 2024. On November 4, 2026, CISA said that bug is being used in real attacks. If you installed Apple updates from May 2024 or later, you already have the fix. This mainly matters for a Mac, iPhone, or iPad that has not updated since before mid-May 2024.",
   "am_i_affected": "You are at risk only if your device never got the May 2024 updates: Safari older than 17.5, macOS Sonoma older than 14.5 (or Ventura older than 13.6.7, Monterey older than 12.7.5), or iPhone/iPad older than iOS 17.5 / 16.7.8. On a Mac check Apple menu > About This Mac and Safari > About Safari. On an iPhone go to Settings > General > About.",
   "action": "Install any Apple update from May 2024 or later (most people already did)",
   "affected": [
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 17.5 (on macOS Monterey and Ventura standalone Safari updates)",
     "fixed_version": "Safari 17.5",
     "fixed_min": "17.5",
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120896"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Sonoma before 14.5; Ventura before 13.6.7; Monterey before 12.7.5",
     "fixed_version": "14.5 (Sonoma) / 13.6.7 (Ventura) / 12.7.5 (Monterey)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120903",
      "https://support.apple.com/en-us/120900",
      "https://support.apple.com/en-us/120899"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "iphone-ios",
     "product_name": "iPhone and iPad (iOS)",
     "platform": "ios",
     "affected_versions": "iOS/iPadOS before 17.5, and older devices before 16.7.8",
     "fixed_version": "iOS/iPadOS 17.5 or 16.7.8",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/120905",
      "https://support.apple.com/en-us/120898"
     ],
     "check": {
      "menu_path": "On your iPhone: Settings > General > About to see your version. Settings > General > Software Update to update.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://support.apple.com/en-us/100100"
    }
   ],
   "fix_steps": [
    "On a Mac: Apple menu > System Settings > General > Software Update, then install what it offers and restart if asked.",
    "On an iPhone or iPad: Settings > General > Software Update, then install what it offers.",
    "If Safari updates on its own for older Macs: open Software Update the same way, or open Safari > About Safari after updating."
   ],
   "official_patch_links": [
    {
     "label": "Apple: update macOS on your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple: update your iPhone or iPad",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/120896",
     "title": "Apple: About the security content of Safari 17.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120903",
     "title": "Apple: About the security content of macOS Sonoma 14.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120900",
     "title": "Apple: About the security content of macOS Ventura 13.6.7",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120899",
     "title": "Apple: About the security content of macOS Monterey 12.7.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120905",
     "title": "Apple: About the security content of iOS 17.5 and iPadOS 17.5",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/120898",
     "title": "Apple: About the security content of iOS 16.7.8 and iPadOS 16.7.8",
     "date": "2024-05-13",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
     "title": "CISA: Known Exploited Vulnerabilities catalog entry for CVE-2024-27834 (added 2026-11-04)",
     "date": "2026-11-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://www.cisa.gov/news-events/alerts/2026/11/04/cisa-adds-one-known-exploited-vulnerability-catalog",
     "title": "CISA alert: Adds One Known Exploited Vulnerability to Catalog (CVE-2024-27834)",
     "date": "2026-11-04",
     "kind": "cisa",
     "official": true
    },
    {
     "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27834",
     "title": "NVD: CVE-2024-27834",
     "date": "2024-05-14",
     "kind": "nvd",
     "official": true
    }
   ]
  },
  {
   "id": "macos-27-2-security-updates-oct-26",
   "url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26/",
   "path": "/incidents/macos-27-2-security-updates-oct-26/",
   "json_url": "https://patchgap.ai/incidents/macos-27-2-security-updates-oct-26.json",
   "title": "Mac: macOS and Safari updates out today fix hundreds of security bugs",
   "category": "mac",
   "platforms": [
    "macos"
   ],
   "products": [
    "macos",
    "safari"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Apple lists 262, 213 and 197 fixed bugs in the three macOS updates (no single score).",
   "exploited_in_wild": "unknown",
   "exploited_note": "Apple's notes for these updates do not say any of the bugs are being attacked.",
   "exploited_source_url": "https://support.apple.com/en-us/149521",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-26",
   "updated_at": "2026-10-27",
   "cves": [],
   "summary": "On October 26, 2026 Apple released new versions for Macs: macOS Golden Gate 27.2, macOS Tahoe 26.7.2 and macOS Sequoia 15.8.2, plus Safari 27.2. Together they fix hundreds of security bugs, such as ones where a bad picture or web page could crash an app or harm your Mac. Install the update that matches your Mac.",
   "am_i_affected": "You are at risk if your Mac is on an older version than the ones below. Click the Apple menu > About This Mac to see your version.",
   "action": "Update your Mac and Safari (Oct 26 updates)",
   "affected": [
    {
     "product": "macos",
     "product_name": "macOS",
     "platform": "macos",
     "affected_versions": "macOS Golden Gate before 27.2; macOS Tahoe before 26.7.2; macOS Sequoia before 15.8.2",
     "fixed_version": "27.2 (Golden Gate) / 26.7.2 (Tahoe) / 15.8.2 (Sequoia)",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149521",
      "https://support.apple.com/en-us/149522",
      "https://support.apple.com/en-us/149523"
     ],
     "check": {
      "menu_path": "Apple menu > About This Mac. Or Apple menu > System Settings > General > Software Update.",
      "command": "sw_vers -productVersion",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    },
    {
     "product": "safari",
     "product_name": "Safari",
     "platform": "macos",
     "affected_versions": "Safari before 27.2 on macOS Sequoia and macOS Tahoe",
     "fixed_version": "27.2",
     "fixed_min": null,
     "fix_note": null,
     "fixed_source_urls": [
      "https://support.apple.com/en-us/149527"
     ],
     "check": {
      "menu_path": "Open Safari. Menu bar: Safari > About Safari.",
      "command": "mdls -name kMDItemVersion \"/Applications/Safari.app\"",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://support.apple.com/en-us/108382"
    }
   ],
   "fix_steps": [
    "Click the Apple menu > System Settings > General > Software Update.",
    "Click Update Now (or Upgrade Now if it offers a new macOS).",
    "Wait for the download and install. Your Mac will restart.",
    "Open Safari afterwards and check Safari > About Safari shows 27.2 on Sequoia or Tahoe."
   ],
   "official_patch_links": [
    {
     "label": "Apple: how to update your Mac",
     "url": "https://support.apple.com/en-us/108382"
    },
    {
     "label": "Apple security releases",
     "url": "https://support.apple.com/en-us/100100"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://support.apple.com/en-us/149521",
     "title": "Apple: About the security content of macOS Golden Gate 27.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149522",
     "title": "Apple: About the security content of macOS Tahoe 26.7.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149523",
     "title": "Apple: About the security content of macOS Sequoia 15.8.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/149527",
     "title": "Apple: About the security content of Safari 27.2",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    },
    {
     "url": "https://support.apple.com/en-us/100100",
     "title": "Apple: security releases list",
     "date": "2026-10-26",
     "kind": "vendor",
     "official": true
    }
   ]
  }
 ]
}