Type Vulnerability
Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Known-exploited catalogue reports exploitation in the wild.
Apple · Memory corruption
Apple Multiple Products Use-After-Free WebKit Vulnerability
CVE-2025-43529
What this means
This is rated high severity (8.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Apple Safari, Apple Ipados and Apple Iphone Os, and 4 more are in your estate, and treat that as the priority.
Full vendor description
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.
Scoring and exploitation
8.8/ 10
CVSS 3.1 base scoreHigh
Exploitable over the network without any account, but only if a user takes an action, such as opening a file or link. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionRequiredUI:R
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
- Elevated attack likelihood (~25.7% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Not reported
- Listed product
- Apple Multiple Products
Weaknesses
CWE-416
Affected products ()
- Apple Safari
- Apple Ipados
- Apple Iphone Os
- Apple Macos
- Apple Tvos
- Apple Visionos
- Apple Watchos
Show the raw CPE strings (7)
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
References
8 links from the CVE record, grouped by site; the vendor's advisory comes first.
support.apple.com7 linksVendor advisory
- 125884 (opens in a new tab)Release Notes · Vendor Advisory
- 125885 (opens in a new tab)Release Notes · Vendor Advisory
- 125886 (opens in a new tab)Release Notes · Vendor Advisory
Show 4 more from support.apple.com
- 125889 (opens in a new tab)Release Notes · Vendor Advisory
- 125890 (opens in a new tab)Release Notes · Vendor Advisory
- 125891 (opens in a new tab)Release Notes · Vendor Advisory
- 125892 (opens in a new tab)Release Notes · Vendor Advisory
cisa.gov1 link
- known-exploited-vulnerabilities-catalog (opens in a new tab)US Government Resource