CVE-2026-43718

Analyzed Analyzed - Analysis Complete

Stack Overflow in Safari 26.5.2

Publication date: 2026-06-29

Last updated on: 2026-06-30

Assigner: Apple Inc.

Description

A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-29

Last Modified

2026-06-30

Generated

2026-07-20

AI Q&A

2026-06-29

EPSS Evaluated

2026-07-18

NVD

CVE-2026-43718

Affected Vendors & Products

Vendor	Product	Version / Range
apple	safari	to 26.5.2 (exc)
apple	ipados	to 26.5.2 (exc)
apple	iphone_os	to 26.5.2 (exc)
apple	macos	From 26.0 (inc) to 26.5.2 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack overflow issue in Safari and related Apple operating systems. It occurs when processing maliciously crafted web content, which can cause Safari to crash unexpectedly. The problem was addressed by improving input validation to prevent the overflow.

Impact Analysis

The vulnerability can cause Safari or the affected Apple operating systems (iOS, iPadOS, macOS Tahoe) to crash unexpectedly when processing malicious web content. This may disrupt your browsing experience and could potentially be exploited to cause denial of service.

Compliance Impact

The vulnerability causes a stack overflow that may lead to an unexpected Safari crash when processing maliciously crafted web content. It does not directly impact confidentiality or integrity of data, but availability is affected due to potential crashes.

Since the issue does not involve data breach or unauthorized data access, its direct impact on compliance with standards like GDPR or HIPAA, which focus on data protection and privacy, is limited.

However, availability disruptions could indirectly affect compliance if critical services relying on Safari are interrupted.

Mitigation Strategies

To mitigate this vulnerability, update Safari, iOS, iPadOS, and macOS Tahoe to version 26.5.2 or later, where the issue has been fixed.

Hi! I’m here to help you understand CVE-2026-43718. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70