Apple Safari <26.1 Process Crash via Malicious Web Content
CVE-2025-43443 Published on November 4, 2025

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.

NVD

Vulnerability Analysis

CVE-2025-43443 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
LOW

Products Associated with CVE-2025-43443

Want to know whenever a new CVE is published for Apple products? stack.watch will email you.

Apple Safari
 
Apple tvOS
 
Apple visionOS
 
Apple watchOS
 
Apple iOS
 
Apple Ios And Ipados
 
Apple iPadOS
 
Apple macOS
 

Affected Versions

Apple Safari: Apple iOS and iPadOS: Apple macOS: Apple tvOS: Apple visionOS: Apple watchOS:

Exploit Probability

EPSS
0.05%
Percentile
15.12%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.