Cross-Origin Vulnerability in Safari and Apple Products
CVE-2026-43700
6.5MEDIUM
What is CVE-2026-43700?
A cross-origin vulnerability has been identified in Safari and various Apple operating systems. This security issue arises from inadequate tracking of security origins, which could allow maliciously crafted web content to expose sensitive user information. Users are advised to update to the latest versions of Safari, iOS, iPadOS, and macOS Tahoe to protect against potential data leaks and ensure a secure browsing experience.
Affected Version(s)
iOS and iPadOS 0 < 26.5.2
macOS 0 < 26.5.2
Safari 0 < 26.5.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.