Product:
Safari
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash. This issue is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-43658 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by Safari, can trigger a crash. This can be done by hosting the malicious content on a website or distributing it through other means, leading users to interact with it unknowingly.
Affected Products
- iOS 26.5: The latest version of Apple’s mobile operating system.
- iPadOS 26.5: The latest version of the operating system for iPads.
- macOS Tahoe 26.5: The latest version of Apple’s desktop operating system.
- tvOS 26.5: The latest version of the operating system for Apple TV.
- visionOS 26.5: The latest version of the operating system for Apple Vision devices.
- watchOS 26.5: The latest version of the operating system for Apple Watch.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Regularly updating software helps protect against known vulnerabilities and enhances overall security.