Description
The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.
Published: 2026-06-29
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A malicious website can craft content that bypasses the web view sandbox, enabling a webkitgtk process to handle resources that are normally restricted. This represents an Improper Access Control flaw (CWE‑284). The impact is that data or code stored within sandboxed content can be exposed or executed by an attacker, potentially enabling further compromise of the device. The vulnerability was addressed with improved checks in Apple’s releases 26.5.2 (Safari, iOS, iPadOS, macOS) and 26.6 (tvOS, visionOS, watchOS).

Affected Systems

Affected are Apple Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Versions older than Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6 are vulnerable. The fixes are applied in those releases and later.

Risk and Exploitability

The flaw can be triggered by a user visiting a specially crafted web page; no additional privileges are required. Because the attack allows sandbox escape, it can affect the entire device. The EPSS score is less than 1%, the vulnerability is not listed in KEV, and the CVSS score of 7.1 indicates high severity. Attack likely proceeds over standard web traffic, such as HTTPS or HTTP, from an untrusted site.

Generated by OpenCVE AI on August 3, 2026 at 07:00 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update all affected Apple software, including Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, to the corresponding bug‑fixed releases (Safari 26.5.2, iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6).
  • If an update cannot be applied immediately, block or mitigate the processing of untrusted content by disabling JavaScript in the browser or using enterprise content filtering policies to block malicious or suspicious sites.
  • Implement security controls such as enabling System Integrity Protection and limiting application permissions to reduce the impact if sandbox escape occurs. Monitor for anomalies like unexpected local file access or privilege escalation.

Generated by OpenCVE AI on August 3, 2026 at 07:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6398-1 webkit2gtk security update
History

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox. The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious website may be able to process restricted web content outside the sandbox.
References

Fri, 17 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title Safari and iOS Sandbox Escape via Malicious Web Content webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 30 Jun 2026 21:45:00 +0000

Type Values Removed Values Added
Title Safari and iOS Sandbox Escape via Malicious Web Content

Tue, 30 Jun 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 30 Jun 2026 16:45:00 +0000

Type Values Removed Values Added
Title Safari, iOS, iPadOS, macOS Sandbox Escape via Malicious Web Content

Tue, 30 Jun 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 30 Jun 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple safari
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple safari

Mon, 29 Jun 2026 21:45:00 +0000

Type Values Removed Values Added
Title Safari, iOS, iPadOS, macOS Sandbox Escape via Malicious Web Content
Weaknesses CWE-284

Mon, 29 Jun 2026 20:15:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the sandbox.
References

Subscriptions

Apple Ios And Ipados Macos Safari
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-27T20:14:17.390Z

Reserved: 2026-05-01T22:46:21.643Z

Link: CVE-2026-43701

cve-icon Vulnrichment

Updated: 2026-06-30T13:08:06.383Z

cve-icon NVD

No data.

cve-icon Redhat

Severity : Important

Publid Date: 2026-07-10T00:00:00Z

Links: CVE-2026-43701 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T07:15:04Z

Weaknesses