Apple Safari

Apple Safari 26.3 WebKit crash via memory handling flaw
CVE-2026-20644 6.5 - Medium - February 11, 2026

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Safari DoS via Improper Memory Handling (pre-26.3)
CVE-2026-20652 7.5 - High - February 11, 2026

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote attacker may be able to cause a denial-of-service.

Resource Exhaustion

Safari Crash via Malicious Web Content Fixed in 26.3
CVE-2026-20608 5.5 - Medium - February 11, 2026

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Allocation of Resources Without Limits or Throttling

Safari memory handling crash (CVE-2026-20635)
CVE-2026-20635 4.3 - Medium - February 11, 2026

The issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Apple macOS/iOS path handling flaw enabling arbitrary file write (pre-26.3)
CVE-2026-20660 5.5 - Medium - February 11, 2026

A path handling issue was addressed with improved logic. This issue is fixed in macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. A remote user may be able to write arbitrary files.

Directory traversal

Safari Web Extension Tracking Flaw Fixed in 26.3
CVE-2026-20676 - February 11, 2026

This issue was addressed through improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. A website may be able to track users through Safari web extensions.

Apple iOS Safari History Leak before 18.7.5 (CVE202620656)
CVE-2026-20656 - February 11, 2026

A logic issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, Safari 26.3, macOS Tahoe 26.3. An app may be able to access a user's Safari history.

Apple Safari WebKit memory bug causes crashes before iOS 26.3
CVE-2026-20636 6.5 - Medium - February 11, 2026

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, Safari 26.3, macOS Tahoe 26.3, visionOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Apple WebKit Memory Handling Crash Fixed v26.2
CVE-2025-46298 6.5 - Medium - January 09, 2026

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Memory init leak in Safari 26.2 on Apple iOS/watchOS/etc. (CVE-2025-46299)
CVE-2025-46299 4.3 - Medium - January 09, 2026

A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 26.2, Safari 26.2, watchOS 26.2, visionOS 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2. Processing maliciously crafted web content may disclose internal states of the app.

Authorization

Apple Safari 26.2 Crashes on Malicious Web Content (CVE-2025-43535)
CVE-2025-43535 4.3 - Medium - December 17, 2025

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Apple iOS/macOS Use-After-Free in Safari (fixed 26.2) CAU leading to code exec
CVE-2025-43529 8.8 - High - December 17, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.

Dangling pointer

Safari <26.2: Web APIs via file: URL in Lockdown Mode
CVE-2025-43526 9.8 - Critical - December 17, 2025

This issue was addressed with improved URL validation. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.

Open Redirect

Apple Safari race condition leads to crash from malicious content
CVE-2025-43531 3.1 - Low - December 17, 2025

A race condition was addressed with improved state handling. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2, tvOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Race Condition

Use-After-Free in Apple Safari 26.2 causing crashes
CVE-2025-43536 4.3 - Medium - December 17, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3. Processing maliciously crafted web content may lead to an unexpected process crash.

Dangling pointer

Apple Safari Type Confusion Crash (pre-26.2)
CVE-2025-43541 4.3 - Medium - December 17, 2025

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Object Type Confusion

Apple Safari Buffer Overflow Fixed in 26.2
CVE-2025-43501 4.3 - Medium - December 17, 2025

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Classic Buffer Overflow

MacOS & Safari 26.2 Sensitive Data Leak via Missing Permission Checks
CVE-2025-46282 5.5 - Medium - December 17, 2025

The issue was addressed with additional permissions checks. This issue is fixed in macOS Tahoe 26.2, Safari 26.2. An app may be able to access sensitive user data.

Authorization

Use-After-Free Crash via Web Content in iOS+iPadOS (fixed in 18.7.2)
CVE-2025-43511 6.5 - Medium - December 12, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.2, Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Dangling pointer

Out-of-Bounds in ANGLE, Google Chrome <143.0.7499.110, Mac
CVE-2025-14174 8.8 - High - December 12, 2025

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Buffer Overflow

Safari 18.5 Domain Name Spoofing in Popup Titles
CVE-2025-31266 4.3 - Medium - November 21, 2025

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

User Interface (UI) Misrepresentation of Critical Information

Safari Fullscreen API Abuse: No Fullscreen Notification Toast
CVE-2025-13132 7.4 - High - November 21, 2025

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)

Clickjacking

Use-After-Free in Safari <16.6 leading to memory corruption (CVE-2023-43000)
CVE-2023-43000 8.8 - High - November 05, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.

Dangling pointer

Apple Safari 26.1: Web Content Crash Vulnerability
CVE-2025-43430 4.3 - Medium - November 04, 2025

This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Improper Input Validation

Apple iOS 26.1: Privacy Preference Bypass via Sensitive Data Leak
CVE-2025-43502 7.5 - High - November 04, 2025

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, Safari 26.1. An app may be able to bypass certain Privacy preferences.

Authorization

Apple Safari 26.1 Address Bar Spoofing (CVE-2025-43493)
CVE-2025-43493 4.3 - Medium - November 04, 2025

The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to address bar spoofing.

Authentication Bypass by Spoofing

Apple OS UI Spoofing (before 26.1)
CVE-2025-43503 4.3 - Medium - November 04, 2025

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Visiting a malicious website may lead to user interface spoofing.

Authentication Bypass by Spoofing

Apple Safari 26.1 unexpected crash via crafted web content
CVE-2025-43427 4.3 - Medium - November 04, 2025

This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Improper Input Validation

Safari/iOS memory corruption via web content, fixed v26.1
CVE-2025-43431 8.8 - High - November 04, 2025

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

Buffer Overflow

Safari UA-FREE Crash before 26.1 on iOS/iPadOS/watchOS, visionOS
CVE-2025-43457 6.5 - Medium - November 04, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Dangling pointer

Apple Safari CVE-2025-43441: Mem Crash (<=26.0), Fixed 26.1
CVE-2025-43441 4.3 - Medium - November 04, 2025

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Safari/iOS/iPadOS Array Allocation Sinking Crash pre-26.1
CVE-2025-43421 4.3 - Medium - November 04, 2025

Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, Safari 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Out-of-bounds Read

Safari Crash via Malformed Web Content Fixed in 26.1
CVE-2025-43440 6.5 - Medium - November 04, 2025

This issue was addressed with improved checks This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

XSS

Safari use-after-free crash on watchOS/iOS @26.1
CVE-2025-43438 4.3 - Medium - November 04, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Dangling pointer

Cross-Origin Data Exfiltration in Safari 26.1 (CVE-2025-43480)
CVE-2025-43480 8.1 - High - November 04, 2025

The issue was addressed with improved checks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. A malicious website may exfiltrate data cross-origin.

Permissive Cross-domain Policy with Untrusted Domains

Apple Safari <26.1 Process Crash via Malicious Web Content
CVE-2025-43443 4.3 - Medium - November 04, 2025

This issue was addressed with improved checks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

UAF in Safari, iOS & WatchOS 26.1: Crash Fixed
CVE-2025-43434 4.3 - Medium - November 04, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Dangling pointer

Apple Safari DNS Leak via Private Relay Logic Flaw
CVE-2025-43376 7.5 - High - November 04, 2025

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.

Safari 26.1 Crash via Malicious Web Content (State Mgmt)
CVE-2025-43458 4.3 - Medium - November 04, 2025

This issue was addressed through improved state management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Improper Input Validation

Apple Safari Memory Corruption via Malicious Web Content
CVE-2025-43419 8.8 - High - November 04, 2025

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to memory corruption.

Buffer Overflow

Apple Safari 26.1 Memory Handling Crash via Malicious Web Content
CVE-2025-43435 4.3 - Medium - November 04, 2025

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Use-After-Free in Safari 26.1 (WebKit)
CVE-2025-43432 4.3 - Medium - November 04, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Dangling pointer

Safari 26.1: Fixed CrossOrigin Image Data Exfiltration
CVE-2025-43392 4.3 - Medium - November 04, 2025

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. A website may exfiltrate image data cross-origin.

Permissive Cross-domain Policy with Untrusted Domains

Apple Safari 26.1 Buffer Overflow Crash via Malicious Web Content
CVE-2025-43429 4.3 - Medium - November 04, 2025

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Safari, visionOS, iOS memory corruption fixed in 26.1
CVE-2025-43433 8.8 - High - November 04, 2025

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. Processing maliciously crafted web content may lead to memory corruption.

Buffer Overflow

Apple Safari 26.1 Crash via Malicious Web Content
CVE-2025-43425 4.3 - Medium - November 04, 2025

The issue was addressed with improved memory handling. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Apple Safari Use-After-Free Crash in v26
CVE-2025-43368 4.3 - Medium - September 15, 2025

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Dangling pointer

Apple Safari CVE-2025-43343 memory handling crash
CVE-2025-43343 9.8 - Critical - September 15, 2025

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.

Buffer Overflow

Apple Safari process crash via malicious web content (fixed in 26)
CVE-2025-43342 9.8 - Critical - September 15, 2025

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26, iOS 18.7 and iPadOS 18.7. Processing maliciously crafted web content may lead to an unexpected process crash.

Improper Input Validation

Apple Safari Memory Handling Crash (CVE-2025-43272)
CVE-2025-43272 6.5 - Medium - September 15, 2025

The issue was addressed with improved memory handling. This issue is fixed in visionOS 26, Safari 26, iOS 26 and iPadOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Buffer Overflow