Advisories · Technology

Apple Safari.

Every CVE that names Apple Safari among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28958 CVE record

CVSS 5.5 Medium

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28962 CVE record

CVSS 7.5 High

Information disclosure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 11 May 2026
CVE-2026-28903 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28942 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28902 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28847 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-28955 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 May 2026
CVE-2026-20691 CVE record

CVSS 4.3 Medium

An authorization issue was addressed with improved state management.
- Apple Safari
- Apple iOS and iPadOS
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-20664 CVE record

CVSS 4.3 Medium

Out-of-bounds write in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-20665 CVE record

CVSS 6.5 Medium

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 25 Mar 2026
CVE-2026-28859 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28861 CVE record

CVSS 4.3 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
- CWE-346
Not analysed yet 25 Mar 2026
CVE-2026-28857 CVE record

CVSS 6.5 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 25 Mar 2026
CVE-2026-28871 CVE record

CVSS 4.3 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2026-20643 CVE record

CVSS 5.4 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-346
Not analysed yet 17 Mar 2026
CVE-2023-43010 CVE record

CVSS 8.8 High

Buffer overflow in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple Safari
- Memory corruption
Not analysed yet 12 Mar 2026
CVE-2026-20644 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20652 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- Denial of service
Not analysed yet 11 Feb 2026
CVE-2026-20608 CVE record

CVSS 5.5 Medium

Resource allocation without limits in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
- Denial of service
Not analysed yet 11 Feb 2026
CVE-2026-20635 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2026-20660 CVE record

CVSS 5.5 Medium

Path traversal in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Path traversal
Not analysed yet 11 Feb 2026
CVE-2026-20676 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Denial of service
Not analysed yet 11 Feb 2026
CVE-2026-20656 CVE record

CVSS 3.3 Low

Improper authorization in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 11 Feb 2026
CVE-2026-20636 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 11 Feb 2026
CVE-2025-46298 CVE record

CVSS 6.5 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 9 Jan 2026
CVE-2025-46299 CVE record

CVSS 4.3 Medium

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 9 Jan 2026
CVE-2025-43535 CVE record

CVSS 4.3 Medium

The issue was addressed with improved memory handling.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 17 Dec 2025
CVE-2025-43529 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 17 Dec 2025
CVE-2025-43526 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Open redirect in Apple Safari and others
- Apple Safari
- Apple macOS
- Open redirect
Not analysed yet 17 Dec 2025
CVE-2025-43531 CVE record

CVSS 3.1 Low

Race condition in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Race condition
Not analysed yet 17 Dec 2025
CVE-2025-43536 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 17 Dec 2025
CVE-2025-43541 CVE record

CVSS 4.3 Medium

Type confusion in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 17 Dec 2025
CVE-2025-43501 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 17 Dec 2025
CVE-2025-46282 CVE record

CVSS 5.5 Medium

Improper access control in Apple Safari and others
- Apple Safari
- Apple macOS
- Broken access control
Not analysed yet 17 Dec 2025
CVE-2025-43511 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 12 Dec 2025
CVE-2025-31266 CVE record

CVSS 4.3 Medium

Apple Safari: A spoofing issue was addressed with improved truncation when displaying the fully…
- Apple Safari
- Apple macOS
- CWE-451
Not analysed yet 21 Nov 2025
CVE-2023-43000 CVE record

CVSS 8.8 HighCritical · KEVKEV

Use after free in Apple macOS and others
- Apple macOS
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 5 Nov 2025
CVE-2025-43430 CVE record

CVSS 4.3 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
Not analysed yet 4 Nov 2025
CVE-2025-43502 CVE record

CVSS 7.5 High

Improper access control in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Broken access control
Not analysed yet 4 Nov 2025
CVE-2025-43493 CVE record

CVSS 4.3 Medium

Authentication bypass by spoofing in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 4 Nov 2025
CVE-2025-43503 CVE record

CVSS 4.3 Medium

Authentication bypass by spoofing in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Authentication bypass
Not analysed yet 4 Nov 2025
CVE-2025-43427 CVE record

CVSS 4.3 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
Not analysed yet 4 Nov 2025
CVE-2025-43431 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43457 CVE record

CVSS 6.5 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43441 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43421 CVE record

CVSS 4.3 Medium

Out-of-bounds read in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43440 CVE record

CVSS 6.5 Medium

Cross-site scripting in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2025
CVE-2025-43438 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43480 CVE record

CVSS 8.1 High

The issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
- CWE-942
Not analysed yet 4 Nov 2025
CVE-2025-43443 CVE record

CVSS 4.3 Medium

This issue was addressed with improved checks.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 4 Nov 2025
CVE-2025-43434 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43376 CVE record

CVSS 7.5 High

A logic issue was addressed with improved state management.
- Apple Safari
- Apple iOS and iPadOS
Not analysed yet 4 Nov 2025
CVE-2025-43458 CVE record

CVSS 4.3 Medium

Improper input validation in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-20
- CWE-703
Not analysed yet 4 Nov 2025
CVE-2025-43419 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43435 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43432 CVE record

CVSS 4.3 Medium

Use after free in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43392 CVE record

CVSS 4.3 Medium

The issue was addressed with improved handling of caches.
- Apple Safari
- Apple iOS and iPadOS
- CWE-942
Not analysed yet 4 Nov 2025
CVE-2025-43429 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43433 CVE record

CVSS 8.8 High

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025
CVE-2025-43425 CVE record

CVSS 4.3 Medium

Buffer overflow in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- Memory corruption
Not analysed yet 4 Nov 2025