CVE-2026-43707

MediumCVSS 6.5

Published: 29/06/2026(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile — higher than 22% of all known CVEs

Summary

A memory corruption issue in Safari was addressed with improved memory handling. This vulnerability is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Risk Assessment

An attacker could exploit this vulnerability to cause a crash of the Safari browser, potentially leading to denial of service (DoS) or arbitrary code execution in the user's context.

Recommendation

Immediately update Safari to version 26.5.2 and update iOS/iPadOS/macOS to the corresponding patched versions.

Original NVD description (English source)

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected process crash.