CVE-2026-43657

LowCVSS 3.3

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

A permissions issue was addressed with additional restrictions in iOS and iPadOS. A malicious app may be able to enumerate installed apps.

Risk Assessment

A malicious app can gain information about installed apps, violating user privacy and potentially enabling further attacks.

Recommendation

Update iOS/iPadOS to a patched version (26.5).

Other vulnerabilities in Apple iOS/iPadOS

CVE-2026-65367Medium
A null pointer dereference was addressed with improved input validation in iOS and iPadOS. An app may cause unexpected system termination.

Original NVD description (English source)

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps.