← Back

Safari

safari

Vendor: Apple • 1,629 CVEs

CVEs (1,629)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-43419
1Apple
6Ipados
Iphone OsSafari+3 more
Jun 17, 2026
Nov 4, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memo...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption.Show less
CVE-2025-43413
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Nov 4, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A...Show more
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe system-wide network connections.Show less
CVE-2025-43392
1Apple
6Ipados
Iphone OsSafari+3 more
Jun 17, 2026
Nov 4, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website ma...Show more
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A website may exfiltrate image data cross-origin.Show less
CVE-2025-43376
1Apple
5Ipados
Iphone OsSafari+2 more
Jun 17, 2026
Nov 4, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be...Show more
A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.7.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A remote attacker may be able to view leaked DNS queries with Private Relay turned on.Show less
CVE-2025-43368
1Apple
4Ipados
Iphone OsMacos+1 more
Jun 17, 2026
Sep 15, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari cr...Show more
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less
CVE-2025-43356
1Apple
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Sep 15, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to acces...Show more
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent.Show less
CVE-2025-43343
3Apple
WebkitgtkWpewebkit
9Ipados
Iphone OsMacos+6 more
Jun 17, 2026
Sep 15, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an u...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.Show less
CVE-2025-43342
3Apple
WebkitgtkWpewebkit
9Ipados
Iphone OsMacos+6 more
Jun 17, 2026
Sep 15, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted w...Show more
A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected process crash.Show less
CVE-2025-43327
1Apple
2Macos
Safari
Jun 17, 2026
Sep 15, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malicious website may lead to address bar spoofing.
CVE-2025-43272
1Apple
6Ipados
Iphone OsMacos+3 more
Jun 17, 2026
Sep 15, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less
CVE-2025-31254
1Apple
3Ipados
Iphone OsSafari
Jun 17, 2026
Sep 15, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.
CVE-2025-43265
1Apple
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Jul 30, 2025
N/A· v4
4.0 MEDIUM· v3
N/A· v2
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted...Show more
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose internal states of the app.Show less
CVE-2025-43240
1Apple
2Macos
Safari
Jun 17, 2026
Jul 30, 2025
N/A· v4
6.2 MEDIUM· v3
N/A· v2
A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.
CVE-2025-43229
1Apple
2Macos
Safari
Jun 17, 2026
Jul 30, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVE-2025-43228
1Apple
3Ipados
Iphone OsSafari
Jun 17, 2026
Jul 30, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The issue was addressed with improved UI. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6. Visiting a malicious website may lead to address bar spoofing.
CVE-2025-43227
1Apple
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Jul 30, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web cont...Show more
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may disclose sensitive user information.Show less
CVE-2025-43216
1Apple
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Jul 30, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing mal...Show more
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less
CVE-2025-43214
1Apple
7Ipados
Iphone OsMacos+4 more
Jul 15, 2026
Jul 30, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content m...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less
CVE-2025-43213
1Apple
7Ipados
Iphone OsMacos+4 more
Jul 15, 2026
Jul 30, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content m...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less
CVE-2025-43212
1Apple
7Ipados
Iphone OsMacos+4 more
Jun 17, 2026
Jul 30, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content m...Show more
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.Show less