CVE-2025-43501
MediumCVSS 4.3Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Risk Assessment
May cause browser or application crashes, leading to operational disruptions and potential data loss. Users visiting malicious websites are at risk.
Recommendation
Update Apple systems to the latest versions: Safari 26.2, iOS 18.7.3, iPadOS 18.7.3, iOS 26.2, iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2.
Other vulnerabilities in Safari, iOS, iPadOS, macOS, visionOS
See all- CVE-2026-28962High
This issue was addressed with improved access restrictions. The vulnerability may lead to the disclosure of sensitive user information due to processing maliciously crafted web content.
- CVE-2024-44309MediumActively exploited
A cookie management issue was addressed with improved state management. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
- CVE-2025-43535Medium
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Original NVD description (English source)
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS