CVE-2026-43804
Received
Received - Intake
State Management Flaw Leads to DoS in Safari and iOS
Vulnerability report for CVE-2026-43804, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-07-27
Last updated on: 2026-07-27
Assigner: Apple Inc.
Description
Description
This issue was addressed through improved state management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. Visiting a website may lead to an app denial-of-service.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | safari | 26.6 |
| apple | ios | 26.6 |
| apple | ipados | 26.6 |
| apple | macos_tahoe | 26.6 |
| apple | visionos | 26.6 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
