CVE-2025-43214

high

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

References

https://support.apple.com/en-us/124155

https://support.apple.com/en-us/124154

https://support.apple.com/en-us/124153

https://support.apple.com/en-us/124152

https://support.apple.com/en-us/124149

https://support.apple.com/en-us/124147

https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-43214.json

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23127

https://bugzilla.redhat.com/show_bug.cgi?id=2448782

https://access.redhat.com/security/cve/CVE-2025-43214

https://access.redhat.com/errata/RHSA-2026:9692

https://access.redhat.com/errata/RHSA-2026:22136

https://access.redhat.com/errata/RHSA-2026:19535

https://access.redhat.com/errata/RHSA-2026:19206

https://access.redhat.com/errata/RHSA-2026:16695

https://access.redhat.com/errata/RHSA-2026:16056

https://access.redhat.com/errata/RHSA-2026:14659

https://access.redhat.com/errata/RHSA-2026:13845

https://access.redhat.com/errata/RHSA-2026:11814

https://access.redhat.com/errata/RHSA-2026:11329

https://access.redhat.com/errata/RHSA-2026:10702

http://seclists.org/fulldisclosure/2025/Jul/36

http://seclists.org/fulldisclosure/2025/Jul/35

http://seclists.org/fulldisclosure/2025/Jul/32

http://seclists.org/fulldisclosure/2025/Jul/30

http://seclists.org/fulldisclosure/2025/Aug/0

Details

Source: Mitre, NVD

Published: 2025-07-30

Updated: 2026-07-15

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00979