Apple and AISLE corroborate a Safari memory-safety CVE

Apple credits AISLE's offensive-security team and AISLE attributes its autonomous engine on CVE-2026-28901, a Safari memory-handling flaw.

Bug class: Memory-handling failure causing a browser crash
Affected codebase: Apple Safari
Credited system: AISLE
Disclosed: August 25, 2026
Attribution: Self-reported attribution
Severity: medium

Source status: Apple's security content credits the AISLE offensive security research team; AISLE's per-CVE page explicitly attributes discovery to its AI-native engine.

Summary

CVE-2026-28901 is a Safari memory-handling issue that can cause a process crash. Apple independently confirms the vulnerability, fix, and AISLE team credit. AISLE’s registry provides the narrower AI-system attribution.

References

Apple: Safari 26.5 security content
AISLE: CVE-2026-28901

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.