CVE-2026-43713

Overview

Advisory: Apple Security Advisory

Impact:

Description: Visiting a website may leak sensitive data

Researchers: Jody Ritonga

Attribute Value
CVE CVE-2026-43713
Bugzilla 314806
Component WebCore
Bug Class LogicError
Severity medium
Commit 73645abad282e490…
Advisory Apple Advisory

Root Cause Analysis

A permissions issue was addressed with additional restrictions.

Files Changed

Source Files

  • Source/WebCore/Modules/async-clipboard/Clipboard.cpp

Test Files

  • LayoutTests/editing/async-clipboard/clipboard-change-data-while-getting-type.html
  • LayoutTests/editing/async-clipboard/clipboard-get-type-with-old-items.html
  • LayoutTests/editing/async-clipboard/resources/async-clipboard-helpers.js
  • LayoutTests/http/tests/security/clipboard/clipboard-access-in-cross-origin-iframe-denied-expected.txt
  • LayoutTests/http/tests/security/clipboard/clipboard-access-in-cross-origin-iframe-denied.html
  • LayoutTests/http/tests/security/clipboard/resources/clipboard-access-from-iframe.html
  • LayoutTests/imported/w3c/web-platform-tests/clipboard-apis/async-navigator-clipboard-basics.https-expected.txt
  • LayoutTests/imported/w3c/web-platform-tests/clipboard-apis/async-navigator-clipboard-basics.https.html
  • LayoutTests/imported/w3c/web-platform-tests/clipboard-apis/resources/user-activation.js