Skip to content
fr Sign in
9.8 Critical

CVE-2025-43526 This issue was addressed with improved URL validation

Description

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.

Affected products and versions

Product Affected versions Fixed in
Safari 26.2 earliest → < 26.2 26.2
macOS 26.2 earliest → < 26.2 26.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Safari

The 520 CVEs of Safari →
CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium CVE-2026-113949 A type confusion issue was addressed with improved state management 8.8 High CVE-2026-112621 An out-of-bounds write issue was addressed with improved bounds checking 7.5 High CVE-2026-112699 An out-of-bounds read was addressed with improved bounds checking 6.5 Medium
Track this CVE