Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-43526 EUVD-2025-203981GHSA-338x-j9c9-2c8v

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode en…

Published Dec 17, 2025 · Updated Apr 2, 2026 · Assigned by apple

Vendor: Apple Product: macOS Product: Safari Platform: macOS Category: Browsers

Description

This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted.

Affected products

VendorProductAffectedFixed
Apple Safari < 26.2 26.2
Apple macOS < 26.2 26.2

Advisories 3

References