CVE-2026-43705

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.5.2 iOS versions prior to 18.7.10 iPadOS versions prior to 18.7.10 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Red Hat Enterprise Linux 6 (affected versions not specified) PS5 versions prior to 14.00 WebKitGTK (affected versions not specified)

Description A type confusion issue exists in the WebKit TransformStream component. Type confusion occurs when a program allocates a resource as one type but accesses it as another, potentially leading to memory corruption. Processing maliciously crafted web content may allow a remote attacker to cause memory corruption, which could result in cross-site scripting, denial of service, or arbitrary code execution if a user is tricked into visiting a malicious website.

Recommendations Update Safari to version 26.5.2. Update iOS to version 18.7.10. Update iPadOS to version 18.7.10. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2. Update tvOS to version 26.6. Update visionOS to version 26.6. Update watchOS to version 26.6. Upgrade Red Hat Enterprise Linux 6 to a vendor-listed fixed release. Update PS5 firmware to version 14.00. At the moment, there is no information about a newer version that contains a fix for this vulnerability regarding WebKitGTK.