CVE-2025-43356
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. A website may be able to access sensor information without user consent.
| Vendor | apple |
| Product | safari |
| Ecosystems | |
| Industries | Technology |
| Published | Sep 15, 2025 |
| Last Updated | Apr 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for apple safari
Be the first to know when new medium vulnerabilities affecting apple safari are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apple / Safari
0 < 26
Apple / iOS and iPadOS
0 < 18.7 0 < 26
Apple / macOS
0 < 26
Apple / tvOS
0 < 26
Apple / visionOS
0 < 26
Apple / watchOS
0 < 26
References
support.apple.com: https://support.apple.com/en-us/125108 support.apple.com: https://support.apple.com/en-us/125109 support.apple.com: https://support.apple.com/en-us/125110 support.apple.com: https://support.apple.com/en-us/125113 support.apple.com: https://support.apple.com/en-us/125114 support.apple.com: https://support.apple.com/en-us/125115 support.apple.com: https://support.apple.com/en-us/125116 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/57 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/56 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/53 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/59 seclists.org: http://seclists.org/fulldisclosure/2025/Sep/49 openwall.com: http://www.openwall.com/lists/oss-security/2025/09/22/3