CVE-2026-43797

MediumCVSS 5.5

Published: 27/07/2026(UTC)Updated: 17/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

This issue was addressed with improved checks. An app may be able to access information about a user's contacts.

Risk Assessment

A malicious app may access the user's contact list, violating privacy.

Recommendation

Update Apple systems to the latest versions to protect contact data.

Other vulnerabilities in Apple iOS/iPadOS/macOS

See all

CVE-2026-64762Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64738Critical
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
CVE-2026-64695Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
CVE-2026-43757Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
CVE-2026-65349Medium
An out-of-bounds read was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
CVE-2026-65347Medium
The issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service.
CVE-2026-65346High
An integer overflow was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.
CVE-2026-65343High
A use after free issue was addressed with improved memory management. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.
CVE-2026-65339Medium
A logic issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to leak sensitive user information.
CVE-2026-65330Medium
The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

Original NVD description (English source)

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access information about a user's contacts.