CVE-2025-43529

77

FAUCET Score

CVE-2025-43529 is a critical use-after-free vulnerability affecting Apple's Safari browser and multiple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. This flaw, with a CVSS score of 8.8 (High), allows for arbitrary code execution when processing maliciously crafted web content, requiring user interaction but no prior authentication. Apple has confirmed active exploitation of this vulnerability in highly sophisticated, targeted attacks, often as part of the DarkSword exploit chain. It is listed on CISA's KEV catalog, and federal agencies have been mandated to apply patches available in Safari 26.2, iOS/iPadOS 18.7.3 and 26.2, and corresponding updates for other affected platforms.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 26.2CPE matchmatch criteria	cpe:2.3:a:apple:safari::::::::
		< 18.7.3CPE matchmatch criteria	cpe:2.3:o:apple:ipados::::::::
		>= 26.0, < 26.2CPE matchmatch criteria	cpe:2.3:o:apple:ipados::::::::
		< 18.7.3CPE matchmatch criteria	cpe:2.3:o:apple:iphone_os::::::::
		>= 26.0, < 26.2CPE matchmatch criteria	cpe:2.3:o:apple:iphone_os::::::::

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

8.58%

Probability of exploitation in next 30 days

EPSS Percentile

94.5%

Percentile rank of EPSS score among Peer Group

As of 2026-07-26

Model: v2026.06.15

Added to KEV · Dec 15, 2025

This CVE's current EPSS score of 0.0858 is in the 94th percentile among its peer group of 14,848 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (17)

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: webkitgtk4-0:2.50.4-2.el7_9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: webkit2gtk3-0:2.50.4-1.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el8_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: webkit2gtk3-0:2.50.4-1.el8_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: webkit2gtk3-0:2.50.4-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el8_6

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: webkit2gtk3-0:2.50.4-1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el8_8

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: webkit2gtk3-0:2.50.4-1.el9_7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el9_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: webkit2gtk3-0:2.50.4-1.el9_2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el9_4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.6 Extended Update SupportFixed in: webkit2gtk3-0:2.50.4-1.el9_6

applevendor investigatingvia nvd_reference

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: webkitgtk3

Vendor Advisories (13)

redhatCVE-2025-43529Important

webkitgtk: webkitgtk: Use-after-free due to improper memory management

appleapple:126346

About the security content of iOS 26.3 and iPadOS 26.3 - Apple Support

appleapple:126348LOW

About the security content of macOS Tahoe 26.3 - Apple Support

appleapple:126351

About the security content of tvOS 26.3 - Apple Support

appleapple:126352

About the security content of watchOS 26.3 - Apple Support

appleapple:126353

About the security content of visionOS 26.3 - Apple Support

appleapple:125884LOW

About the security content of iOS 26.2 and iPadOS 26.2 - Apple Support

appleapple:125885LOW

About the security content of iOS 18.7.3 and iPadOS 18.7.3 - Apple Support

appleapple:125886LOW

About the security content of macOS Tahoe 26.2 - Apple Support

appleapple:125889LOW

About the security content of tvOS 26.2 - Apple Support

appleapple:125890LOW

About the security content of watchOS 26.2 - Apple Support

appleapple:125891LOW

About the security content of visionOS 26.2 - Apple Support

appleapple:125892LOW

About the security content of Safari 26.2 - Apple Support

References

cisa.gov / known-exploited-vulnerabilities-catalog

US Government Resource

support.apple.com / en-us/125884

Release NotesVendor Advisory

support.apple.com / en-us/125885

Release NotesVendor Advisory

support.apple.com / en-us/125886

Release NotesVendor Advisory

support.apple.com / en-us/125889

Release NotesVendor Advisory

support.apple.com / en-us/125890

Release NotesVendor Advisory

support.apple.com / en-us/125891

Release NotesVendor Advisory

support.apple.com / en-us/125892

Release NotesVendor Advisory