Vulnerability Spotlight: Remote code execution vulnerability in Apple Safari

Summary: Cisco Talos's Marcin Towalski discovered a remote code execution vulnerability in the Fonts feature of Apple Safari version 13.0.3, where a specially crafted HTML page triggers a type confusion leading to memory corruption and possibly arbitrary code execution. An attacker must trick the user into visiting a malicious web page to trigger it, and Talos worked with Apple under its coordinated disclosure policy to resolve the issue and make an update available.
What's compelling: The exploit path is a single malicious web page opened in Safari, so the user's browsing habit is the only control standing between the attacker and code execution on the device.

Read the original at Cisco Talos ↗

Topics: Cloud Security
Related: Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026
Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage Cyber Risks ·