PT-2025-51037

CVE-2025-43529

·

Published

2025-12-12

·

Updated

2026-10-29

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.2 iOS versions prior to 18.7.3 iOS versions prior to 26.2 iPadOS versions prior to 18.7.3 iPadOS versions prior to 26.2 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2 tvOS versions prior to 26.2 watchOS versions prior to 26.2
Description A use-after-free issue in the WebKit rendering module exists due to improper memory management. Processing maliciously crafted web content can lead to arbitrary code execution, potentially granting an attacker full control over the device. This issue has been exploited in highly sophisticated attacks targeting specific individuals on versions of iOS prior to iOS 26.
Recommendations Update Safari to version 26.2. Update iOS to version 18.7.3 or 26.2. Update iPadOS to version 18.7.3 or 26.2. Update macOS Tahoe to version 26.2. Update visionOS to version 26.2. Update tvOS to version 26.2. Update watchOS to version 26.2.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2025:23663
ALSA-2025:23700
DLA-4414-1
DSA-6083-1
OPENSUSE-SU-2026:20065-1
SUSE-SU-2025:4527-1
SUSE-SU-2025:4528-1
SUSE-SU-2026:0021-1
SUSE-SU-2026:20102-1
USN-7957-1
Found an issue in the description? Have something to add? Feel free to write us 👾