CVE-2025-43440
Description
This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A vulnerability in Apple's WebKit allows processing malicious web content to cause a process crash, fixed in Safari 26.1 and OS updates.
CVE-2025-43440 is a vulnerability in Apple's WebKit engine that arises from insufficient input validation when processing maliciously crafted web content. The issue was addressed with improved checks in Safari 26.1 and corresponding OS updates [1][2][3][4].
Exploitation requires tricking a user into loading malicious web content, such as a specially crafted webpage. No additional privileges or user interaction beyond browsing is needed, making it remotely exploitable.
Successful exploitation could lead to an unexpected process crash, potentially causing denial of service or instability in the browser or application rendering the content.
Apple has released patches in Safari 26.1, iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1. Users are advised to update their devices to the latest software versions.
AI Insight generated on May 19, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
9cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <26.1
- (no CPE)range: <26.1
- Range: <26.1
- Range: <26.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- support.apple.com/en-us/125632nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125637nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125638nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125639nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125640nvdRelease NotesVendor Advisory
- support.apple.com/en-us/125634nvd
News mentions
0No linked articles in our index yet.