Apple Safari 26.1 Security Update: Address Bar Spoofing, Memory Corruption, and 17 CVEs

Critical Vulnerability Information Safari 26.1 Released November 3, 2025 Vulnerability Details Safari - CVE-2025-43493 - Impact: Visiting a malicious website could lead to address bar spoofing - CVE-2025-43503 - Impact: Visiting a malicious website could lead to user interface spoofing - CVE-2025-43502 - Impact: An application may be able to bypass certain privacy settings WebKit - CVE-2025-43480 - Impact: A malicious website may leak data across domains - CVE-2025-43458 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43430 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43427 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43443 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43441 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43435 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43425 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43438 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43457 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43434 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43433 - Impact: Processing maliciously crafted web content may lead to memory corruption - CVE-2025-43431 - Impact: Processing maliciously crafted web content may lead to memory corruption - CVE-2025-43432 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43429 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43421 - Impact: Processing maliciously crafted web content may lead to unexpected process crashes - CVE-2025-43392 - Impact: A website may leak image data across domains

Goal Reached Thanks to every supporter — we hit 100%!

Apple Safari 26.1 Security Update: Address Bar Spoofing, Memory Corruption, and 17 CVEs