CVE-2026-43701
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk8th percentile — higher than 8% of all known CVEs
Summary
A vulnerability in Safari and Apple systems allows a malicious website to process restricted web content outside the sandbox. The issue is fixed in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2 with improved checks.
Risk Assessment
An attacker can bypass the sandbox mechanism and access protected system resources, potentially leading to data leakage or further privilege escalation.
Recommendation
Immediately update Safari to version 26.5.2 and the corresponding iOS/iPadOS/macOS systems to the specified versions to remediate the vulnerability.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox.