{"id":"CVE-2025-43529","kind":"vulnerability","aliases":["CVE-2025-43529"],"related":[],"title":"A use-after-free issue was addressed with improved memory management","description":"A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.","summary":"A use-after-free bug in Apple's WebKit browser engine lets a crafted web page corrupt memory on iOS, iPadOS, macOS and other Apple products. Attackers are already exploiting it in the wild, and it can also affect non-Apple apps that use WebKit to parse HTML.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2025-12-15T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple safari","fixed":["26.2"],"affected":"< 26.2","ecosystem":"vendor"},{"name":"apple ipados","fixed":["18.7.3"],"affected":"< 18.7.3","ecosystem":"vendor"},{"name":"apple ipados","fixed":["26.2"],"affected":">= 26.0, < 26.2","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["18.7.3"],"affected":"< 18.7.3","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["26.2"],"affected":">= 26.0, < 26.2","ecosystem":"vendor"},{"name":"apple macos","fixed":["26.2"],"affected":">= 26.0, < 26.2","ecosystem":"vendor"},{"name":"apple tvos","fixed":["26.2"],"affected":"< 26.2","ecosystem":"vendor"},{"name":"apple visionos","fixed":["26.2"],"affected":"< 26.2","ecosystem":"vendor"},{"name":"apple watchos","fixed":["26.2"],"affected":"< 26.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","exploited","ios","ipados","macos","safari","vendor","webkit"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Update Apple devices to the latest iOS, iPadOS and macOS releases; the specific fixed versions are unknown from the sources.\nFor non-Apple apps that embed WebKit, check with the vendor for a patched build.","status":"open","published_at":"2025-12-15T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:42:45+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T20:42:45Z","model":"claude-haiku-5-5","output":{"fix":"Update Apple devices to the latest iOS, iPadOS and macOS releases; the specific fixed versions are unknown from the sources.\nFor non-Apple apps that embed WebKit, check with the vendor for a patched build.","reach":"internet","summary":"A use-after-free bug in Apple's WebKit browser engine lets a crafted web page corrupt memory on iOS, iPadOS, macOS and other Apple products. Attackers are already exploiting it in the wild, and it can also affect non-Apple apps that use WebKit to parse HTML.","category":"vendor","who_cares":["apple","ios","ipados","macos","safari","webkit"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs code and corrupts memory after a victim opens a malicious web page.","analyst_note":"Find the Apple security advisory listing fixed versions and the affected product list via the CVE-2025-43529 entry on support.apple.com; confirm exploitation details and patched versions.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000468,"input_tokens":2603,"output_tokens":416,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-14174':180C '-2025':14A,17A,179C '-43529':15A,18A '18.7.3':120C,123C '26':177C '26.2':118C,125C,128C,131C,133C,135C,137C 'address':8A,107C 'affect':89B 'alreadi':79B 'also':88B,182C 'app':93B 'appl':42B,57B,75B,92B,149C 'apple':19A,22A,24A,26A,28A,31A,34A,36A,38A,40A 'arbitrari':146C 'attack':77B,166C 'awar':151C 'browser':60B 'bug':55B 'code':147C 'content':142C 'corrupt':67B 'craft':64B,140C 'cve':13A,16A,178C 'engin':61B 'execut':148C 'exploit':43B,80B,161C 'extrem':164C 'fix':115C 'free':5A,54B,104C 'html':99B 'improv':10A,109C 'individu':170C 'io':44B,70B,119C,124C,174C,176C 'ipado':45B,71B,122C,127C 'ipados':25A,27A 'iphone':29A,32A 'issu':6A,105C,113C,157C,183C 'lead':144C 'let':62B 'maco':46B,72B,129C 'macos':35A 'malici':139C 'manag':12A,111C 'may':143C,158C 'memori':11A,68B,110C 'multiple':20A 'non':91B 'non-appl':90B 'os':30A,33A 'page':66B 'pars':98B 'process':138C 'product':76B 'products':21A 'report':154C,188C 'respons':185C 'safari':23A,47B,117C 'sophist':165C 'specif':168C 'taho':130C 'target':169C 'tvos':37A,132C 'use':3A,52B,95B,102C 'use-after-fre':2A,51B,101C 'vendor':48B 'version':172C 'visiono':134C 'visionos':39A 'watcho':136C 'watchos':41A 'web':65B,141C 'webkit':49B,59B,96B 'wild':84B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-12-15T00:00:00+00:00","kev":{"dateAdded":"2025-12-15","dueDate":"2026-01-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-43529","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-43529","severity":null,"published_at":"2025-12-15T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:21+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-43529","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43529","severity":null,"published_at":"2025-12-17T21:16:11+00:00","modified_at":"2026-10-07T11:10:00+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}