Product:
Safari
Summary
A use-after-free issue was addressed with improved memory management. This issue may lead to an unexpected Safari crash when processing maliciously crafted web content. The issue has been fixed in Safari 26, macOS Tahoe 26, iOS 26, and iPadOS 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-43368 |
Exploitation
To exploit this vulnerability, an attacker can craft malicious web content that, when processed by Safari, triggers the use-after-free condition. This can lead to a crash of the browser, potentially allowing the attacker to execute arbitrary code or cause a denial of service. User interaction is required, as the victim must visit the malicious web page for the exploit to be successful.
Affected Products
- Safari: The web browser affected by the use-after-free issue.
- macOS Tahoe: The operating system version where the issue is fixed.
- iOS: The mobile operating system version where the issue is fixed.
- iPadOS: The tablet operating system version where the issue is fixed.
Mitigation
To mitigate this vulnerability, users should update to the latest versions of Safari, macOS Tahoe, iOS, and iPadOS where the issue has been addressed. Regularly updating software and being cautious about the websites visited can help reduce the risk of exploitation.