Medium severity5.3NVD Advisory· Published Jun 29, 2026· Updated Jul 27, 2026
CVE-2026-43704
CVE-2026-43704
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.
Affected products
11- Range: = 26.5.2
- Range: = 26.6
- Range: = 26.6
= 26.5.2+ 1 more
- (no CPE)range: = 26.5.2
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <26.5.2
- Range: = 26.5.2
= 26.5.2+ 1 more
- (no CPE)range: = 26.5.2
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.5.2
- Range: = 26.6
Patches
Vulnerability mechanics
References
6- support.apple.com/en-us/127594nvdVendor Advisory
- support.apple.com/en-us/127595nvdVendor Advisory
- support.apple.com/en-us/127685nvdVendor Advisory
- support.apple.com/en-us/128068nvd
- support.apple.com/en-us/128069nvd
- support.apple.com/en-us/128070nvd
News mentions
1- Apple Patches Everything (July 2026), (Wed, Jul 29th)SANS Internet Storm Center · Jul 29, 2026