Stack Overflow Vulnerability in Safari and macOS Products
CVE-2026-43718

6.5MEDIUM

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS
Vendor: CVE Published:; 29 June 2026

What is CVE-2026-43718?

A stack overflow vulnerability has been identified in Apple’s Safari browser and related products. This issue arises from improper input validation mechanisms that could allow maliciously crafted web content to affect system stability, potentially causing Safari to crash unexpectedly. Apple has addressed this vulnerability in Safari version 26.5.2 and its associated operating systems. Users are encouraged to update their devices to ensure protection against this security risk.

Affected Version(s)

iOS and iPadOS 0 < 26.5.2

macOS 0 < 26.5.2

Safari 0 < 26.5.2

References

https://support.apple.com/en-us/127594

https://support.apple.com/en-us/127595

https://support.apple.com/en-us/127685

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 29, 2026
Vulnerability Reserved
May 1, 2026

CVE-2026-43718 Data

JSON