CVE-2025-43457

MediumCVSS 6.5

Published: 04/11/2025(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

43th percentile - higher than 43% of all known CVEs

Summary

A use-after-free vulnerability was fixed in Safari and other Apple products through improved memory management. The issue occurs when processing maliciously crafted web content.

Risk Assessment

An attacker could exploit this vulnerability to cause an unexpected Safari crash, potentially leading to denial of service or code execution within the browser context.

Recommendation

Immediately update systems to Safari 26.1, iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, or watchOS 26.1.

Original NVD description (English source)

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.