Dashboard / CVE-2025-43529

CVE-2025-43529

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 5/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

CISA Known Exploited Vulnerability

Vendor / Product Apple — Multiple Products
Date Added 2025-12-15
Remediation Due 2026-01-05
https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
apple ipados < 18.7.3
apple ipados 26.0 – 26.2
apple iphone_os < 18.7.3
apple iphone_os 26.0 – 26.2
apple macos 26.0 – 26.2
apple safari < 26.2
apple tvos < 26.2
apple visionos < 26.2
apple watchos < 26.2

References & Advisories (8)

https://support.apple.com/en-us/125884
Release Notes Vendor Advisory
https://support.apple.com/en-us/125885
Release Notes Vendor Advisory
https://support.apple.com/en-us/125886
Release Notes Vendor Advisory
https://support.apple.com/en-us/125889
Release Notes Vendor Advisory
https://support.apple.com/en-us/125890
Release Notes Vendor Advisory
https://support.apple.com/en-us/125891
Release Notes Vendor Advisory
https://support.apple.com/en-us/125892
Release Notes Vendor Advisory

Bug Bounty Relevance

5 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

25.65%
Raw Score 0.256500
Percentile 98.0%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links