CVE-2026-43727
Overview
Advisory: Apple Security Advisory
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected Safari crash
Researchers: Tommy DeVoss from Braze Security Team (@thedawgyg), Gurpreet Shergill, Gia Bui (@yabeow) from Calif.io
| Attribute | Value |
|---|---|
| CVE | CVE-2026-43727 |
| Bugzilla | 313691 |
| Component | WebCore |
| Bug Class | UAF |
| Severity | medium |
| Commit | c5036aadbde48318… |
| Advisory | Apple Advisory |
Root Cause Analysis
A use-after-free issue was addressed with improved memory management.
Files Changed
Source Files
Source/WebCore/Modules/async-clipboard/ClipboardItemBindingsDataSource.cpp
Test Files
LayoutTests/editing/async-clipboard/clipboard-write-item-crash-expected.txtLayoutTests/editing/async-clipboard/clipboard-write-item-crash.html