CVE-2025-43368

CVE Database · CVE-2025-43368

CVE-2025-43368

· MEDIUMModified

CVSS v3.1

4.3

EPSS

0.72%

Published

Sep 15, 2025

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-416

Affected Products (4)

apple · safari (up to 26.0)vulnerable

apple · ipados (up to 26.0)vulnerable

apple · iphone_os (up to 26.0)vulnerable

apple · macos (up to 26.0)vulnerable

References (8)

https://support.apple.com/en-us/125108

Release NotesVendor Advisory

https://support.apple.com/en-us/125110

https://support.apple.com/en-us/125113

Release NotesVendor Advisory

http://seclists.org/fulldisclosure/2025/Sep/49

http://seclists.org/fulldisclosure/2025/Sep/53

http://seclists.org/fulldisclosure/2025/Sep/59

http://www.openwall.com/lists/oss-security/2025/09/22/3

https://cert-portal.siemens.com/productcert/html/ssa-032379.html

KEV Catalog EPSS Scores Vendors All CVEs