CVE-2026-43660

Опубликовано: 11 мая 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

Ссылки

https://support.apple.com/en-us/127110
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127111
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127115
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127118
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127119
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127120
Release Notes
Vendor Advisory
https://support.apple.com/en-us/127121

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 18.7.9 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 18.7.9 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 26.5 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 26.5 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 26.5 (исключая)

EPSS

Процентиль: 19%

0.0027

Низкий

7.5 High

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVE-2026-43660

CVSS3: 6.5

redhat

2 месяца назад

CVE-2026-43660

CVSS3: 7.5

debian

3 месяца назад

A validation issue was addressed with improved logic. This issue is fi ...

GHSA-xcxj-2mhj-x95h

CVSS3: 7.5

github

3 месяца назад

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

openSUSE-SU-2026:21129-1

suse-cvrf

около 1 месяца назад

Security update for webkit2gtk3

SUSE-SU-2026:2623-1

suse-cvrf

около 1 месяца назад

Security update for webkit2gtk3

EPSS

Процентиль: 19%

0.0027

Низкий

7.5 High

CVSS3

Дефекты

CWE-693