CVE-2026-43717 Apple CVE debrief

Who should care

Users of Safari, iOS, iPadOS, macOS, tvOS, and watchOS should apply the relevant updates to prevent potential crashes. System administrators should ensure that all affected systems are inventoried and updated. Security teams should monitor for any suspicious web content that may be related to this vulnerability.

Technical summary

A use-after-free issue in Safari was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash. The affected products include Safari, iOS, iPadOS, macOS, tvOS, and watchOS. The vulnerability is due to improper handling of memory, which can be exploited by processing malicious web content. Users of affected products should apply updates to prevent potential crashes and monitor for suspicious web content. This issue was fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, watchOS 26.6.

Defensive priority

Medium priority due to the potential for crashes and the availability of patches.

Recommended defensive actions

• Apply the relevant updates to Safari, iOS, iPadOS, macOS, tvOS, and watchOS.
• Ensure that all affected systems are inventoried and updated.
• Monitor for any suspicious web content that may be related to this vulnerability.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record was published on 2026-06-29T20:17:36.363Z and was last modified on 2026-07-27T21:16:55.867Z. The NVD entry is currently Modified. This issue is related to a use-after-free vulnerability in Safari, which could lead to an unexpected crash when processing maliciously crafted web content. The affected products include Safari, iOS, iPadOS, macOS, tvOS, and watchOS. Users should verify the updates are applied and monitor for suspicious web content.

Official resources