What is the CVSS score of CVE-2026-43718?

CVE-2026-43718 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2026-43718?

Yes, a patch is available for CVE-2026-43718. Update the affected software to the latest version immediately.

Apple Safari CVE-2026-43718

EUVD-2026-40188 MEDIUM

Stack-based Buffer Overflow (CWE-121)

2026-06-29 apple

GHSA-gcg2-qvp9-rg56

Buffer Overflow Apple Stack Overflow Ios And Ipados

6.5

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

vuln.today AI

6.5 MEDIUM

Network-delivered via web content (AV:N), no privileges needed (PR:N), user must visit malicious page (UI:R), impact is crash-only with no confidentiality or integrity loss (C:N/I:N/A:H).

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 29, 2026 - 22:34 vuln.today

CVSS changed

Jun 29, 2026 - 22:22 NVD

6.5 (MEDIUM)

Patch available

Jun 29, 2026 - 22:02 EUVD

CVE Published

Jun 29, 2026 - 19:42 cve.org

UNKNOWN (no severity yet)

CVE Published

Jun 29, 2026 - 19:42 cve.org

MEDIUM 6.5

DescriptionCVE.org

A stack overflow was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

AnalysisAI

Stack-based buffer overflow in Apple Safari's web content processing engine causes an unexpected application crash across Safari, iOS/iPadOS, and macOS Tahoe platforms. All versions prior to 26.5.2 are affected; an attacker can trigger the overflow by luring a victim to a maliciously crafted web page, resulting in a denial-of-service through a Safari crash. No active exploitation is confirmed (not listed in CISA KEV) and no public exploit code has been identified at time of analysis, keeping real-world risk moderate despite the broad install base.

Technical ContextAI

CWE-121 (Stack-based Buffer Overflow) describes a condition where a program writes more data to a stack-allocated buffer than its declared capacity, overwriting adjacent stack memory. The fix description - 'improved input validation' - indicates the vulnerable code path failed to properly bound-check attacker-controlled input during web content parsing or rendering within WebKit, Apple's browser engine. Affected products confirmed via CPE strings: cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*, cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*, and cpe:2.3:a:apple:macos:*:*:*:*:*:*:*:*. Because WebKit is the shared rendering engine across all Apple platforms, the same underlying flaw surfaces in Safari on macOS and in the system browser engine on iOS and iPadOS.

RemediationAI

Upgrade to the vendor-released patched versions: Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, or macOS Tahoe 26.5.2. These updates are confirmed available from Apple per the official advisories at https://support.apple.com/en-us/127594 (Safari), https://support.apple.com/en-us/127595 (iOS/iPadOS), and https://support.apple.com/en-us/127685 (macOS). For environments where immediate patching is not feasible, a compensating control is to restrict use of Safari for untrusted or external web content and route browsing through a managed browser with content filtering - note this does not eliminate risk for iOS/iPadOS where WebKit is the mandatory rendering engine for all browsers. Disabling JavaScript from unknown origins via Safari's content settings can reduce attack surface but may break legitimate functionality.