PT-2025-51037
CVE-2025-43529
·
Published
2025-12-12
·
Updated
2026-10-29
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 26.2
iOS versions prior to 18.7.3
iOS versions prior to 26.2
iPadOS versions prior to 18.7.3
iPadOS versions prior to 26.2
macOS Tahoe versions prior to 26.2
visionOS versions prior to 26.2
tvOS versions prior to 26.2
watchOS versions prior to 26.2
Description
A use-after-free issue in the WebKit rendering module exists due to improper memory management. Processing maliciously crafted web content can lead to arbitrary code execution, potentially granting an attacker full control over the device. This issue has been exploited in highly sophisticated attacks targeting specific individuals on versions of iOS prior to iOS 26.
Recommendations
Update Safari to version 26.2.
Update iOS to version 18.7.3 or 26.2.
Update iPadOS to version 18.7.3 or 26.2.
Update macOS Tahoe to version 26.2.
Update visionOS to version 26.2.
Update tvOS to version 26.2.
Update watchOS to version 26.2.
Found an issue in the description? Have something to add? Feel free to write us 👾