CVE-2026-43814
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
Memory management was improved to fix a use-after-free issue. An app may be able to cause unexpected system termination.
Risk Assessment
Risk of system crash (DoS) caused by a malicious app.
Recommendation
Update systems to iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, or watchOS 26.6.
Other vulnerabilities in Apple iOS
See all- CVE-2015-5882High
The processor_set_tasks API implementation in Apple iOS before version 9 allows local users to bypass an entitlement protection mechanism and gain access to the task ports of arbitrary processes by leveraging root privileges.
- CVE-2014-4451High
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, making it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
- CVE-2013-5133High
Backup in Apple iOS before 7.1 does not properly restrict symlinks, allowing remote attackers to overwrite files during a restore operation via crafted backup data.
- CVE-2026-65347Medium
An issue addressed with improved checks affects iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. Processing an image may lead to a denial-of-service.
- CVE-2026-65330Medium
A memory handling issue addressed with improved memory handling affects iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-65329Medium
An authentication issue addressed with improved state management affects iOS and iPadOS. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic.
- CVE-2026-64766High
An integer overflow was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
- CVE-2026-64765High
An integer overflow was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
- CVE-2026-64747High
A buffer overflow was addressed with improved size validation. An app may be able to execute arbitrary code with kernel privileges.
- CVE-2026-43817Medium
Bounds checking was improved to fix an out-of-bounds read. An app may be able to cause unexpected system termination.
Original NVD description (English source)
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.