CVE-2026-43660
HighSummary
A validation issue was addressed with improved logic. This issue may have prevented Content Security Policy from being enforced.
Risk Assessment
Maliciously crafted web content could lead to a breach of Content Security Policy, posing risks to users and organizations.
Recommendation
It is recommended to update to the latest versions of Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS to mitigate this vulnerability.
Other vulnerabilities in Safari, iOS, iPadOS, macOS, tvOS, visionOS, watchOS
See all- CVE-2026-28907High
The issue concerns improper input validation, which may lead to the Content Security Policy not being enforced. It has been fixed in Safari 26.5 and iOS 18.7.9.
- CVE-2024-54508High
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash.
- CVE-2026-64753Medium
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information.
Original NVD description (English source)
A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS