CVE-2026-43708

Overview

Advisory: Apple Security Advisory

Impact:

Description: A malicious website may exfiltrate data cross-origin

Researchers: Behzad Najjarpour Jabbari (@G4ru)

Attribute	Value
CVE	CVE-2026-43708
Bugzilla	315306
Component	WebKit
Bug Class	CrossOrigin
Severity	medium
Commit	971435fdd3868e7f…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved input validation.

Files Changed

Source Files

• Source/WebKit/NetworkProcess/cocoa/NetworkSessionCocoa.mm

Test Files

• Tools/TestWebKitAPI/Tests/WebKit/WKWebView/WKHTTPCookieStore.mm