CVE-2025-43392

Details

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, visionOS 26.1. A website may exfiltrate image data cross-origin.

Affected Packages

macOS

macOS 26

Fixed in:

26.1

References

WEBhttps://support.apple.com/en-us/125632 WEBhttps://support.apple.com/en-us/125633 WEBhttps://support.apple.com/en-us/125634 WEBhttps://support.apple.com/en-us/125637 WEBhttps://support.apple.com/en-us/125638 WEBhttps://support.apple.com/en-us/125639 WEBhttps://support.apple.com/en-us/125640 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-43392

CVE-2025-43392

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline