CVE-2026-43718

MediumCVSS 6.5

Published: 29/06/2026(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile — higher than 20% of all known CVEs

Summary

A stack overflow vulnerability was discovered in Safari, iOS, iPadOS, and macOS Tahoe, addressed with improved input validation. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Risk Assessment

An attacker could exploit this vulnerability to crash Safari, disrupting user activity and potentially enabling further attacks on the system.

Recommendation

Immediately update Safari to version 26.5.2 and iOS, iPadOS, and macOS Tahoe to the corresponding 26.5.2 versions.

Original NVD description (English source)

A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.