Product:
tvOS, Safari, iOS, iPadOS, visionOS, watchOS, macOS
Summary
A correctness issue was addressed with improved checks. This issue may lead to an unexpected process crash when processing maliciously crafted web content. The issue has been fixed in several Apple operating systems and applications.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-43342 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected systems, can trigger a crash of the process. This can be done remotely over a network without requiring any user interaction, making it a significant risk for users of the affected products.
Affected Products
- tvOS 26: Affected by the correctness issue leading to process crashes.
- Safari 26: Vulnerable to crashes when processing malicious web content.
- iOS 18.7: Includes the vulnerability that can be exploited remotely.
- iPadOS 18.7: Similar vulnerabilities as iOS, leading to potential crashes.
- visionOS 26: Affected by the same correctness issue.
- watchOS 26: Vulnerable to the described issue.
- macOS Tahoe 26: Also affected by the correctness issue.
- iOS 26: Vulnerable to crashes from malicious content.
- iPadOS 26: Similar vulnerabilities as iOS 26.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems and applications. Apple has released updates that address the correctness issue and improve security against potential exploits.