CVE-2025-43529: Apple Multiple Products Use-After-Free WebKit Vulnerability

#apple #multipleproducts #cybersecurity #vulnerability

CVE ID

CVE-2025-43529

Vulnerability Name

Apple Multiple Products Use-After-Free WebKit Vulnerability

Project: Apple
Product: Multiple Products

Date

Date Added: 2025-12-15
Due Date: 2026-01-05

Description

Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.