CVE-2026-43714
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The issue was addressed with improved input sanitization. A malicious app may be able to access protected user data.
Risk Assessment
A malicious app may access protected user data, compromising privacy and security.
Recommendation
Update Apple systems to the latest versions to secure user data.
Other vulnerabilities in Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS
See all- CVE-2026-64733Critical
Data protection was improved. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to fingerprint the user.
- CVE-2026-64729Critical
Memory management was improved for a use-after-free issue. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64700Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43822Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43810Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43807Critical
A buffer overflow was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a malicious accessory to cause unexpected app termination.
- CVE-2026-43803Critical
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a remote attacker to cause unexpected system termination.
- CVE-2026-43799Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43778Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43769Critical
An integer overflow was addressed with improved input validation. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
Original NVD description (English source)
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. A malicious app may be able to access protected user data.