CVE-2026-43716
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile — higher than 21% of all known CVEs
Summary
A vulnerability in Safari may cause a browser crash when processing maliciously crafted web content. The issue was addressed with improved memory handling. Fixes are included in Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2.
Risk Assessment
The risk involves potential disruption of user activity due to Safari crashes, which could lead to loss of unsaved data or session interruption.
Recommendation
Immediately update Safari to version 26.5.2 and corresponding iOS/iPadOS/macOS versions as specified in the advisory.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.