Apple Safari 26.5.2 Security Update: WebKit Vulnerabilities Disclosure

Vulnerability Overview Safari version 26.5.2 has been released, containing multiple security fixes. These fixes primarily address several vulnerabilities in WebKit and Web Extensions, involving memory management, input validation, and permission controls. Impact Scope macOS Sonoma and macOS Sequoia: All listed vulnerabilities affect these two operating system versions. Remediation Web Extensions Vulnerability Description: Malicious Web Extensions may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43704 WebKit Vulnerability Description: Processing maliciously crafted Web content may lead to the disclosure of sensitive user information. Remediation: Resolved by improving secure origin tracking. CVE ID: CVE-2026-43700 Vulnerability Description: Malicious websites may be able to extract data across origins. Remediation: Resolved by improving checks. CVE ID: CVE-2026-43735 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43734 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43726 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43699 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43742 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43732 Vulnerability Description: Processing maliciously crafted Web content may lead to memory corruption. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43731 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected Safari crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43727 Vulnerability Description: Malicious websites may be able to process restricted Web content outside the sandbox. Remediation: Resolved by improving input validation. CVE ID: CVE-2026-43725 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43663 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-39872 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected Safari crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43712 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected Safari crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43716 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected Safari crashes. Remediation: Resolved by improving boundary checks. CVE ID: CVE-2026-43676 Vulnerability Description: Processing maliciously crafted Web content may lead to process memory leaks. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43740 Vulnerability Description: Accessing a website may leak sensitive data. Remediation: Resolved by adding additional restrictions. CVE ID: CVE-2026-43713 Vulnerability Description: Malicious websites may be able to extract data across origins. Remediation: Resolved by improving input validation. CVE ID: CVE-2026-43708 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43707 Vulnerability Description: Processing maliciously crafted Web content may lead to memory corruption. Remediation: Resolved by improving checks. CVE ID: CVE-2026-43705 Vulnerability Description: Malicious websites may be able to process restricted Web content outside the sandbox. Remediation: Resolved by improving checks. CVE ID: CVE-2026-43701 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected Safari crashes. Remediation: Resolved by improving input validation. CVE ID: CVE-2026-43745 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected Safari crashes. Remediation: Resolved by improving memory management. CVE ID: CVE-2026-43720 Vulnerability Description: Malicious websites may be able to silently hijack clipboard data. Remediation: Resolved by improving state management. CVE ID: CVE-2026-43721 Vulnerability Description: Processing maliciously crafted Web content may cause unexpected process

Goal Reached Thanks to every supporter — we hit 100%!

Apple Safari 26.5.2 Security Update: WebKit Vulnerabilities Disclosure