CVE-2025-43480

HIGH 8.1CVE-2025-43480 · Published 04/11/2025 · updated 18/10/2026

In short

CVE-2025-43480 is a HIGH (CVSS 8.1) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.2% of all vulnerabilities.
Fix: update to 26.1 or later.

Package	Affected versions	Patched versions
safari apple	`< 26.1`	`26.1`

Description

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious website may exfiltrate data cross-origin.

References

support.apple.com/en-us/125632 · Release Notes
support.apple.com/en-us/125634
support.apple.com/en-us/125637 · Release Notes
support.apple.com/en-us/125638 · Release Notes
support.apple.com/en-us/125639 · Release Notes
support.apple.com/en-us/125640 · Release Notes

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

< 26.1

26.1

More vulnerabilities in safari

See all →