Product:
Safari
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. This issue is fixed in Safari 26 and other related Apple operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-43272 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by Safari, can trigger a crash. This requires user interaction, as the user must visit a specially designed webpage to initiate the exploit. Once the user interacts with the malicious content, the crash occurs, potentially leading to further exploitation.
Affected Products
- Safari: The web browser affected by the memory handling issue.
- visionOS: The operating system for Apple Vision devices impacted by the vulnerability.
- watchOS: The operating system for Apple Watch devices that may experience crashes due to this issue.
- macOS Tahoe: The version of macOS that includes the affected Safari browser.
- iOS: The mobile operating system for iPhones that is vulnerable to this exploit.
- iPadOS: The operating system for iPads that is also affected by the issue.
Mitigation
To mitigate this vulnerability, users should update their Safari browser and related operating systems to the latest versions where the issue has been addressed. Regularly applying updates and patches from Apple can help protect against such vulnerabilities.