CVE-2026-43708

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2

Description Improved input validation was implemented to prevent a malicious website from exfiltrating data cross-origin. Cross-origin exfiltration occurs when a site accesses data from a different origin than the one that served the page, violating the Same-Origin Policy.

Recommendations Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.