CVE-2025-43368 - Vulnerability Details

- webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Published: 2025-09-15

Score: 4.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A use‑after‑free flaw within WebKit’s memory handling was identified. An attacker can craft malicious web content that triggers the flaw, leading to an unhandled crash of Safari. The breach does not provide execution privileges or access to sensitive data; the consequence is service disruption for the user’s browser session and potential impact on applications that depend on Safari being available.

Affected Systems

Apple’s Safari web browser, available on macOS, iOS, and iPadOS. The issue is fixed in Safari 26, iOS 26, iPadOS 26 and macOS Tahoe 26, so any versions prior to these are vulnerable.

Risk and Exploitability

The CVSS score of 4.3 indicates low‑to‑moderate severity, and an EPSS score below 1% suggests a very low likelihood of exploitation in the wild. The vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires an attacker to serve or embed specially crafted content in a web page that the user visits or loads, making the attack vector likely network or local page consumption; however, it does not give the attacker any further privileges or control.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

Safari

affected

Version	Status	Constraints
`0`	affected	< 26

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 26

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 26

Configuration 1 [-]

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

Vendor	Product	Confidence	Versions
Apple	Ios	—	—
Apple	Ipados	—	—
Apple	Macos	—	—
Apple	Safari	—	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade Safari to version 26 or later on macOS, iOS, and iPadOS.
Upgrade macOS to Tahoe 26 or a later release that includes the WebKitGTK fix.
Apply the Apple security update referenced in the support documents to ensure the use‑after‑free is patched.

Generated by OpenCVE AI on April 27, 2026 at 23:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4375-1	webkit2gtk security update
Debian DSA	DSA-6042-1	webkit2gtk security update
EUVD	EUVD-2025-29284	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Ubuntu USN	USN-7817-1	WebKitGTK vulnerabilities

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0007.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Sep/49
http://seclists.org/fulldisclosure/2025/Sep/53
http://seclists.org/fulldisclosure/2025/Sep/59
http://www.openwall.com/lists/oss-security/2025/09/22/3
https://nvd.nist.gov/vuln/detail/CVE-2025-43368
https://support.apple.com/en-us/125108
https://support.apple.com/en-us/125110
https://support.apple.com/en-us/125113
https://webkitgtk.org/security/WSA-2025-0006.html
https://www.cve.org/CVERecord?id=CVE-2025-43368

History

Thu, 02 Apr 2026 20:30:00 +0000

Type	Values Removed	Values Added
Description	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References		https://support.apple.com/en-us/125110

Tue, 04 Nov 2025 22:30:00 +0000

Type	Values Removed	Values Added
References		http://www.openwall.com/lists/oss-security/2025/09/22/3

Tue, 04 Nov 2025 02:30:00 +0000

Type	Values Removed	Values Added
References	https://support.apple.com/en-us/125110

Tue, 04 Nov 2025 01:45:00 +0000

Type	Values Removed	Values Added
Description	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.	A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Mon, 03 Nov 2025 19:30:00 +0000

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Sep/49 http://seclists.org/fulldisclosure/2025/Sep/53 http://seclists.org/fulldisclosure/2025/Sep/59

Wed, 24 Sep 2025 00:15:00 +0000

Type	Values Removed	Values Added
Title		webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
References		https://nvd.nist.gov/vuln/detail/CVE-2025-43368 https://webkitgtk.org/security/WSA-2025-0006.html https://www.cve.org/CVERecord?id=CVE-2025-43368
Metrics	threat_severity `None`	threat_severity `Important`

Wed, 17 Sep 2025 14:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple iphone Os
CPEs		cpe:2.3:a:apple:safari:::::::: cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple iphone Os

Wed, 17 Sep 2025 11:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios Apple ipados Apple macos Apple safari
Vendors & Products		Apple Apple ios Apple ipados Apple macos Apple safari

Tue, 16 Sep 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 16 Sep 2025 15:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-416
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}`

Mon, 15 Sep 2025 22:45:00 +0000

Type	Values Removed	Values Added
Description		A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, macOS Tahoe 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
References		https://support.apple.com/en-us/125108 https://support.apple.com/en-us/125110 https://support.apple.com/en-us/125113

Subscriptions

Apple Ios Ipados Iphone Os Macos Safari

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2025-09-15T22:35:41.026Z

Updated: 2026-04-02T18:24:14.743Z

Reserved: 2025-04-16T15:24:37.114Z

Link: CVE-2025-43368

Vulnrichment

Updated: 2025-11-04T21:10:44.254Z

NVD

Status : Modified

Published: 2025-09-15T23:15:38.360

Modified: 2026-04-02T19:20:34.613

Link: CVE-2025-43368

Redhat

Severity : Important

Publid Date: 2025-09-23T00:00:00Z

Links: CVE-2025-43368 - Bugzilla

OpenCVE Enrichment

Updated: 2026-04-28T00:00:18Z

Weaknesses

CWE-416

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object