CVE-2026-43708 Safari <26.5.2 cross-origin data exfiltration
CVE-2026-43708 Published on June 29, 2026

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may exfiltrate data cross-origin.

NVD


Products Associated with CVE-2026-43708

Want to know whenever a new CVE is published for Apple products? stack.watch will email you.

Apple iOS
 
Apple iPadOS
 
Apple macOS
 
Apple Safari
 
Apple Ios And Ipados
 

Affected Versions

Apple Safari: Apple iOS and iPadOS: Apple macOS: