VDB

CVE-2026-43721

CVE-2026-43721 PUBLISHED CVSS 6.5 MEDIUM

Reported by apple · Published June 29, 2026

This issue was addressed through improved state management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to silently hijack clipboard data.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
AppleSafari0
AppleiOS and iPadOS0
ApplemacOS0
AppleiOS and iPadOS0, 0
ApplemacOS0, 0
AppleSafari0, 0

Timeline

  • Jun 29, 2026 CVE Published
  • Jun 30, 2026 EPSS Score
  • Jun 30, 2026 Coalition ESS Score
  • Jun 30, 2026 CVE Updated
  • Jul 21, 2026 Distribution Patch
  • Jul 21, 2026 Security Advisory
  • Jul 21, 2026 Distribution Patch
  • Jul 21, 2026 Security Advisory
  • Jul 21, 2026 Distribution Patch
  • Jul 21, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›