CVE-2026-43735

Summary

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may exfiltrate data cross-origin.

Affected Software

VendorProductVersion RangeStatus
AppleSafari0 < 26.5.2affected
AppleiOS and iPadOS0 < 26.5.2affected
ApplemacOS0 < 26.5.2affected

Weaknesses

  • A malicious website may exfiltrate data cross-origin

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References