Cross-Origin Vulnerability in Safari and Apple Products
CVE-2026-43700

Currently unrated

Key Information:

Vendor

Apple

Vendor
CVE Published:
29 June 2026

What is CVE-2026-43700?

A cross-origin vulnerability has been identified in Safari and various Apple operating systems. This security issue arises from inadequate tracking of security origins, which could allow maliciously crafted web content to expose sensitive user information. Users are advised to update to the latest versions of Safari, iOS, iPadOS, and macOS Tahoe to protect against potential data leaks and ensure a secure browsing experience.

Affected Version(s)

iOS and iPadOS 0 < 26.5.2

macOS 0 < 26.5.2

Safari 0 < 26.5.2

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.