CVE-2026-43703

MediumCVSS 6.5

Published: 29/06/2026(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile — higher than 13% of all known CVEs

Summary

A vulnerability in WebKit allows an unexpected process crash when processing maliciously crafted web content. The issue was fixed with improved memory handling in Apple systems.

Risk Assessment

An attacker could crash the browser or any application using WebKit, leading to denial of service (DoS) and potential session data loss.

Recommendation

Immediately update Apple devices to iOS 26.5.2, iPadOS 26.5.2, or macOS Tahoe 26.5.2.

Original NVD description (English source)

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected process crash.