Firetruck

CVE-2025-43529

KEV
Updated Sep 21, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 26.2affected
iOS and iPadOSApple / iOS and iPadOS>= 0, < 18.7.3affected
macOSApple / macOS>= 0, < 26.2affected
SafariApple / Safari>= 0, < 26.2affected
tvOSApple / tvOS>= 0, < 26.2affected
visionOSApple / visionOS>= 0, < 26.2affected
watchOSApple / watchOS>= 0, < 26.2affected