CVE-2026-43732

Опубликовано: 29 июн. 2026

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.

Ссылки

https://support.apple.com/en-us/127594
Vendor Advisory
https://support.apple.com/en-us/127595
Vendor Advisory
https://support.apple.com/en-us/127685
Vendor Advisory
https://support.apple.com/en-us/128068
https://support.apple.com/en-us/128069
https://support.apple.com/en-us/128070

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 26.5.2 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 26.5.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 26.5.2 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 26.0 (включая) до 26.5.2 (исключая)

EPSS

Процентиль: 40%

0.0048

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVE-2026-43732

CVSS3: 6.5

redhat

2 месяца назад

A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may disclose sensitive user information.

CVE-2026-43732

CVSS3: 6.5

debian

3 месяца назад

A path handling issue was addressed with improved validation. This iss ...

GHSA-pmqm-5gjj-gr9q

CVSS3: 6.5

github

3 месяца назад

openSUSE-SU-2026:21508-1

suse-cvrf

около 2 месяцев назад

Security update for webkit2gtk3

SUSE-SU-2026:3555-1

suse-cvrf

около 1 месяца назад

Security update for webkit2gtk3

EPSS

Процентиль: 40%

0.0048

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-22