CVE-2025-43432

EUVD-2025-37680
A use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CISA-ADPADP
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 17%
Affected Products (NVD)
VendorProductVersion
applesafari
𝑥
< 26.1
appleipados
𝑥
< 26.1
appleiphone_os
𝑥
< 26.1
appletvos
𝑥
< 26.1
applevisionos
𝑥
< 26.1
applewatchos
𝑥
< 26.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
webkitgtk
bionic
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
ignored
webkit2gtk
bionic
ignored
focal
ignored
jammy
Fixed 2.50.2-0ubuntu0.22.04.2
released
noble
Fixed 2.50.2-0ubuntu0.24.04.2
released
plucky
Fixed 2.50.2-0ubuntu0.25.04.2
released
questing
Fixed 2.50.2-0ubuntu0.25.10.2
released
xenial
ignored
qtwebkit-source
bionic
ignored
jammy
dne
noble
dne
plucky
dne
questing
dne
xenial
ignored
qtwebkit-opensource-src
bionic
ignored
focal
ignored
jammy
ignored
noble
ignored
plucky
dne
questing
dne
xenial
ignored
wpewebkit
focal
ignored
jammy
ignored
noble
dne
plucky
dne
questing
dne
Common Weakness Enumeration
References
https://support.apple.com/en-us/125632
https://support.apple.com/en-us/125634
https://support.apple.com/en-us/125637
https://support.apple.com/en-us/125638
https://support.apple.com/en-us/125639
https://support.apple.com/en-us/125640