CVE-2026-43721

Summary

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to silently hijack clipboard data.

Affected Software

VendorProductVersion RangeStatus
AppleSafari0 < 26.5.2affected
AppleiOS and iPadOS0 < 26.5.2affected
ApplemacOS0 < 26.5.2affected

Weaknesses

  • A malicious website may be able to silently hijack clipboard data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References