Skip to content
fr Sign in
5.3 Medium

CVE-2026-43704 A use-after-free issue was addressed with improved memory management

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious web extension may be able to cause an unexpected process crash.

Affected products and versions

Product Affected versions Fixed in
Safari 26.5 earliest → < 26.5.2 26.5.2
iOS and iPadOS 26.5 earliest → < 26.5.2 26.5.2
macOS 26.5 earliest → < 26.5.2 26.5.2
tvOS 26.6 earliest → < 26.6 26.6
visionOS 26.6 earliest → < 26.6 26.6
watchOS 26.6 earliest → < 26.6 26.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Safari

The 520 CVEs of Safari →
CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium CVE-2026-113949 A type confusion issue was addressed with improved state management 8.8 High CVE-2026-112621 An out-of-bounds write issue was addressed with improved bounds checking 7.5 High CVE-2026-112699 An out-of-bounds read was addressed with improved bounds checking 6.5 Medium
Track this CVE