Safari, iOS, iPadOS, macOS, visionOS vulnerabilities
4 known CVE vulnerabilities in Safari, iOS, iPadOS, macOS, visionOS, translated and rated.
- CVE-2026-28962High
This issue was addressed with improved access restrictions. The vulnerability may lead to the disclosure of sensitive user information due to processing maliciously crafted web content.
- CVE-2024-44309MediumActively exploited
A cookie management issue was addressed with improved state management. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
- CVE-2025-43535Medium
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
- CVE-2025-43501Medium
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS