PT-2026-53724 · Apple · Safari+2

Eternalsakura13 + 1 · Published 2026-06-29 · Updated 2026-06-29 · CVE-2026-43732

NVD

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may disclose sensitive user information.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-43732

Affected Products

Safari

Ios/Ipados

Apple Macos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-43732 · Security Note
• https://support.apple.com/en-us/127685 · Note
• https://support.apple.com/en-us/127594 · Note
• https://support.apple.com/en-us/127595 · Note