VDB
CVE-2026-43700
CVE-2026-43700
PUBLISHED
CVSS 6.5 MEDIUM
Reported by apple · Published June 29, 2026
A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may disclose sensitive user information.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | 0 |
| Apple | iOS and iPadOS | 0 |
| Apple | macOS | 0 |
| Apple | iOS and iPadOS | 0 |
| Apple | macOS | 0 |
| Apple | Safari | 0 |
Timeline
- Jun 29, 2026 CVE Published
- Jun 29, 2026 CVE Updated
- Jun 30, 2026 EPSS Score
- Jun 30, 2026 Coalition ESS Score