CVE-2026-43705Patch(apple / ipados)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch apple ipados systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption.

apple CVEs Back to dashboard

2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-843

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
safari

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Peaked 2d ago at 1 mentions (2026-07-20); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

apple

Products

ipadosiphone_osmacossafari

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Patch

266.7%

PoC

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-20	1	Patch1
2026-09-28	1	PoC1
2026-09-29	1	Patch1

Full discourse3 posts

BrutalSam@BrutalSam_23d
PoC
Test this on PS5 14.00 and post screenshots/video https://brutal-sam.github.io/type/ just wanna see if it still crashes. This is the WebKit TransformStream type confusion. CVE-2026-43705 (there's no exploit development going on, maybe others will) https://t.co/lF5DbNtbqX
Post summary
The post shares a link to a test case for CVE-2026-43705 (WebKit TransformStream type confusion) to check if it still crashes on PS5 14.00, noting no exploit work is being done. It supplies the vulnerability type but mentions no exploit, active exploitation, patches, or false‑positive claims.
111502013120.8K
15.9K followersView on X
BrutalSam@BrutalSam_22d
Patch
turns out that Sony patched the WebKit transoformStream type confusion bug on fw 14.00 while the crash happens on lower firmwares. CVE-2026-43705 https://github.com/WebKit/WebKit/commit/8fd92b1021d310b2580eb3ac7913911eb14dc476#diff-d4e457be57132647d86d4ee96cb715806b03889e08dee06f6e54862c7f26dd9dR9
Post summary
Sony patched CVE-2026-43705 in WebKit for firmware 14.00, with technical details on the type confusion vulnerability and a linked commit to the fix. The text focuses on remediation rather than exploitation or disclosure.
3801641220.7K
15.9K followersView on X
VulniPulse@vulnipulse92d
Patch
⚠️ Red Hat Enterprise Linux 6 alert: CVE-2026-43705 (CVSS 8.8) Refer to the vendor advisory for the confirmed security impact. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-43705 #Linux #RedHatEnterpriseLinux6 #CyberSecurity #CVE
Post summary
The advisory alerts on CVE-2026-43705, a high‑severity vulnerability on Red Hat Enterprise Linux 6, and advises users to apply the vendor‑issued fixed release.
0000030
6 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
App	apple	safari	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities

What researchers are saying

CVE-2026-43705

VulniPulse[verified]@vulnipulsePatch

The advisory alerts on CVE-2026-43705, a high‑severity vulnerability on Red Hat Enterprise Linux 6, and advises users to apply the vendor‑issued fixed release.

BrutalSam@BrutalSam_PoC

The post shares a link to a test case for CVE-2026-43705 (WebKit TransformStream type confusion) to check if it still crashes on PS5 14.00, noting no exploit work is being done. It supplies the vulnerability type but mentions no exploit, active exploitation, patches, or false‑positive claims.

BrutalSam@BrutalSam_Patch

Sony patched CVE-2026-43705 in WebKit for firmware 14.00, with technical details on the type confusion vulnerability and a linked commit to the fix. The text focuses on remediation rather than exploitation or disclosure.