Validation Issue in Apple Products Affects Web Content Security

CVE-2026-43660

What is CVE-2026-43660?

A validation issue has been identified within several Apple operating systems that affects the enforcement of Content Security Policies (CSP). This vulnerability arises from the processing of maliciously crafted web content, which may hinder the intended security measures designed to protect users from cross-site scripting and other web-based attacks. The issue has been addressed in updates for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, underscoring the importance of keeping devices updated to safeguard against potential exploitation.

References