Out-of-Bounds Write Vulnerability in Safari and Apple Products
CVE-2026-43745

6.5MEDIUM

Key Information:

Vendor

Apple
Status
Safari
iOS And iPad OS
Mac OS
Vendor
CVE Published:
29 June 2026

What is CVE-2026-43745?

An out-of-bounds write vulnerability was identified in Safari and other Apple products, which could allow an attacker to exploit improper input validation. This vulnerability may lead to unexpected crashes when processing maliciously crafted web content. Apple has addressed this issue in version 26.5.2 for Safari, iOS, iPadOS, and macOS, enhancing security and ensuring users are protected against potential exploits.

Affected Version(s)

iOS and iPadOS 0 < 26.5.2

macOS 0 < 26.5.2

Safari 0 < 26.5.2

References

https://support.apple.com/en-us/127594
https://support.apple.com/en-us/127595
https://support.apple.com/en-us/127685

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.