CVE-2025-43434

CVE Database · CVE-2025-43434

CVE-2025-43434

· MEDIUMModified

CVSS v3.1

4.3

EPSS

1.10%

Published

Nov 3, 2025

Modified

Apr 2, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-416

Affected Products (5)

apple · safari (up to 26.1)vulnerable

apple · ipados (up to 26.1)vulnerable

apple · iphone_os (up to 26.1)vulnerable

apple · visionos (up to 26.1)vulnerable

apple · watchos (up to 26.1)vulnerable

References (6)

https://support.apple.com/en-us/125632

https://support.apple.com/en-us/125633

https://support.apple.com/en-us/125634

https://support.apple.com/en-us/125638

https://support.apple.com/en-us/125639

https://support.apple.com/en-us/125640

KEV Catalog EPSS Scores Vendors All CVEs