Apple Safari/iOS Sandbox Bypass via Malicious Site (fixed in 26.5.2)
CVE-2026-43701 Published on June 29, 2026
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox.
Products Associated with CVE-2026-43701
Want to know whenever a new CVE is published for Apple products? stack.watch will email you.
Affected Versions
Apple Safari:- Before 26.5.2 is affected.
- Before 26.5.2 is affected.
- Before 26.5.2 is affected.