Use-After-Free Vulnerability in Safari and Apple Operating Systems
CVE-2026-43720

6.5MEDIUM

Key Information:

Vendor: Apple
Status: Safari; iOS And iPad OS; Mac OS
Vendor: CVE Published:; 29 June 2026

What is CVE-2026-43720?

A use-after-free vulnerability was identified that could allow attackers to exploit improper memory management within Safari and other Apple operating systems. This vulnerability can be triggered by processing specially crafted web content, which could lead to an unexpected crash of the Safari browser. To mitigate this risk, users are encouraged to update to the latest versions of Safari, iOS, iPadOS, and macOS Tahoe, which include crucial security enhancements.

Affected Version(s)

iOS and iPadOS 0 < 26.5.2

macOS 0 < 26.5.2

Safari 0 < 26.5.2

References

https://support.apple.com/en-us/127594

https://support.apple.com/en-us/127595

https://support.apple.com/en-us/127685

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 29, 2026
Vulnerability Reserved
May 1, 2026

CVE-2026-43720 Data

JSON