Safari UAF Crash Fixed in 26.5.2
CVE-2026-43709 Published on June 29, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Vulnerability Analysis
CVE-2026-43709 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2026-43709 has been classified to as a Dangling pointer vulnerability or weakness.
Products Associated with CVE-2026-43709
Want to know whenever a new CVE is published for Apple products? stack.watch will email you.
Affected Versions
Apple Safari:- Before 26.5.2 is affected.
- Before 26.5.2 is affected.
- Before 26.5.2 is affected.