Google Big Sleep found five vulnerabilities in Safari

According to Google Big Sleep, Google’s AI agent, five WebKit flaws were found in Safari that could lead to browser crashes or memory corruption if exploited. The vulnerabilities are CVE-2025-43434 (use-after-free), CVE-2025-43429 (buffer overflow), CVE-2025-43430 (unspecified bug causing crashes), and CVE-2025-43431 & CVE-2025-43433 (memory corruption), and none of them has been actively exploited in attacks in the wild.

Apple released updates to address the issues, including iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1, and Safari 26.1 for macOS Sonoma and macOS Sequoia. The report notes that Google also released Chrome 139 in August to address a high-severity vulnerability in the V8 engine tracked as CVE-2025-9132. This article appeared on 4 November 2025.