CVE-2026-43725

Summary

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox.

Affected Software

VendorProductVersion RangeStatus
AppleSafari0 < 26.5.2affected
AppleiOS and iPadOS0 < 26.5.2affected
ApplemacOS0 < 26.5.2affected

Weaknesses

  • A malicious website may be able to process restricted web content outside the sandbox

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References