This vulnerability in Apple Safari (CVE-2026-43701) involves insufficient sandbox enforcement that could allow a malicious website to process restricted web content outside the sandbox environment. The flaw affects Safari and related Apple OS platforms. Apple fixed the issue by implementing improved checks to prevent sandbox escape. The CVSS 3.1 base score is 7.1 (high), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and partial impact to confidentiality, integrity, and availability. The fix is included in Safari 26.5.2 and OS updates iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Successful exploitation could allow a malicious website to bypass Safari's sandbox restrictions, potentially accessing or manipulating restricted web content. This can lead to partial loss of confidentiality, integrity, and availability of user data or browser processes. The vulnerability requires user interaction and can be exploited remotely over the network.

Apple has released official fixes in Safari 26.5.2 and corresponding OS updates (iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6). Users and administrators should apply these updates promptly to remediate the vulnerability. No additional mitigation steps are indicated beyond applying the official patches.