CVE-2025-43480

Details

The issue was addressed with improved checks. This issue is fixed in tvOS 26.1, watchOS 26.1, macOS Tahoe 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. A malicious website may exfiltrate data cross-origin.

Affected Packages

macOS

macOS 26

Fixed in:

26.1

References

WEBhttps://support.apple.com/en-us/125632 WEBhttps://support.apple.com/en-us/125634 WEBhttps://support.apple.com/en-us/125637 WEBhttps://support.apple.com/en-us/125638 WEBhttps://support.apple.com/en-us/125639 WEBhttps://support.apple.com/en-us/125640 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-43480

CVE-2025-43480

Details

Affected Packages

References

CVSS Analysis

Ecosystems

Timeline