CVE-2026-43708

4.3 Moyenne

Publiée le 29/06/2026 à 22:17 · Modifiée le 18/08/2026 à 00:17 · Modifiée · Source : product-security@apple.com

Description

The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may exfiltrate data cross-origin.

Traduire en français

Produits concernés

Apple Safari
Apple iOS and iPadOS
Apple macOS
Apple tvOS
Apple visionOS
Apple watchOS
Apple ipados
Apple iphone os

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-20

Références

https://support.apple.com/en-us/127594 Vendor Advisory
https://support.apple.com/en-us/127595 Vendor Advisory
https://support.apple.com/en-us/127685 Vendor Advisory
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070
https://support.apple.com/en-us/148287

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories