CVE-2026-43732

MediumCVSS 6.5

Published: 29/06/2026(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile — higher than 17% of all known CVEs

Summary

A path handling vulnerability in Safari and Apple systems was fixed with improved validation. Updates are available in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2.

Risk Assessment

Processing maliciously crafted web content may disclose sensitive user information, posing a data leak risk.

Recommendation

Immediately update Safari, iOS, iPadOS, and macOS Tahoe to version 26.5.2 or later.

Original NVD description (English source)

A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may disclose sensitive user information.