CVE-2026-43705

HighCVSS 8.8

Published: 29/06/2026(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile — higher than 19% of all known CVEs

Summary

A type confusion vulnerability was discovered in Safari, iOS, iPadOS, and macOS Tahoe. The issue was fixed with improved type checking. Processing maliciously crafted web content may lead to memory corruption.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code in the context of the browser or system, potentially leading to device compromise or data theft.

Recommendation

Immediately update Safari to version 26.5.2 and iOS/iPadOS/macOS Tahoe to version 26.5.2. Restrict access to untrusted websites until the update is applied.

Original NVD description (English source)

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to memory corruption.