All findings

CVE-2026-28984 medium

Apple accepts an Anthropic CVD Safari finding

Apple credits Artem Dinaburg via Anthropic's coordinated-disclosure program on CVE-2026-28984; no public source identifies the particular Anthropic model.

Bug class
Memory-handling failure causing a browser crash
Affected codebase
Apple Safari
Credited system
Claude / Anthropic Research
Disclosed
August 25, 2026
Attribution
Self-reported attribution
AI role
Unspecified
Severity
medium
Source status: Apple confirms the CVE and credits Artem Dinaburg of Trail of Bits via Anthropic's CVD program. No CVE-2026-28984 row exists in the cited Anthropic ledger, so this entry preserves only program-level attribution.

Summary

CVE-2026-28984 is a Safari memory-handling issue that can cause a process crash. Apple’s public advisory establishes the vulnerability, fix, and Anthropic CVD program credit.

Apple does not name a model in the reporter line, and an exact lookup finds no matching row in Anthropic’s cited ledger. The entry therefore uses the broad Claude / Anthropic Research profile with a self-reported, model-unspecified label rather than inferring Mythos from program membership.


References


Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.