vulnerability

Apple Safari security update for CVE-2025-43265

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:N/A:N)

Published

Jul 31, 2025

Added

Jul 31, 2025

Modified

Apr 6, 2026

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose internal states of the app.

Solutions

apple-safari-upgrade-18_6apple-safari-windows-uninstall

References

CVE-2025-43265
https://attackerkb.com/topics/CVE-2025-43265
CWE-125
EUVD-EUVD-2025-23088
http://support.apple.com/en-us/124152
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23088

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report