CVE-2026-43701
Overview
Advisory: Apple Security Advisory
Impact:
Description: A malicious website may be able to process restricted web content outside the sandbox
Researchers: Aaron Grattafiori - NVIDIA AI Red Team
| Attribute | Value |
|---|---|
| CVE | CVE-2026-43701 |
| Bugzilla | 315004 |
| Component | WebCore |
| Bug Class | SandboxEscape |
| Severity | medium |
| Commit | f23ffb5a845006c8… |
| Advisory | Apple Advisory |
Root Cause Analysis
The issue was addressed with improved checks.
Files Changed
Source Files
Source/WebCore/loader/DocumentLoader.cppSource/WebKit/UIProcess/API/APINavigation.hSource/WebKit/UIProcess/WebPageProxy.cpp