CVE-2025-43343CWE-119

CVE-2025-43343

Critical · published September 16, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

🚨 A crafty piece of web content can crash your Safari browser, and it could happen without warning! 🔥 Think of this like a restaurant where the chef serves a dish that looks amazing but is secretly missing a few critical ingredients. One bite, and the whole experience collapses — that’s what this flaw does to your browser when it encounters malicious content! This vulnerability can lead to unexpected process crashes, bringing your browsing to a halt at the most inconvenient moments. Imagine losing that critical online meeting or getting kicked off a streaming service just when the plot thickens — absolutely devastating!

Put simply

Think of this like a restaurant where the chef serves a dish that looks amazing but is secretly missing a few critical ingredients. One bite, and the whole experience collapses — that’s what this flaw does to your browser when it encounters malicious content! CVE-2025-43343 involves a memory handling issue in Safari and other Apple platforms, allowing malicious web content to trigger a crash, potentially leading to service disruption and degraded user experience.

What to do

This vulnerability can lead to unexpected process crashes, bringing your browsing to a halt at the most inconvenient moments. Imagine losing that critical online meeting or getting kicked off a streaming service just when the plot thickens — absolutely devastating! To protect yourself, update to Safari 26 or the latest versions of iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. Regularly check for updates and enable automatic updates to ensure you’re always protected! You've got this! Follow these steps and keep your browsing sessions smooth and crash-free! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00776 · 55.3th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-09-16T03:15Z
Affected products (9)
ProductVersionsFixed in
apple/safari< 26.026.0
apple/ipados< 26.026.0
apple/iphone_os< 26.026.0
apple/macos< 26.026.0
apple/tvos< 26.026.0
apple/visionos< 26.026.0
apple/watchos< 26.026.0
webkitgtk/webkitgtk< 2.50.12.50.1
wpewebkit/wpe_webkit< 2.50.12.50.1
References (15)
EPSS history
Timeline
  • 15 SEP 22:35Z
    The issue was addressed with improved memory handling
    cvelistv5