CVE-2026-64724
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A vulnerability in Apple systems, fixed with improved memory handling. An attacker on the local network may be able to cause a denial-of-service.
Risk Assessment
A DoS attack could disrupt systems and services, leading to downtime and loss of productivity.
Recommendation
It is recommended to update systems to the versions mentioned in the description to prevent DoS attacks from the local network.
Other vulnerabilities in Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS
See all- CVE-2026-64733Critical
Data protection was improved. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to fingerprint the user.
- CVE-2026-64729Critical
Memory management was improved for a use-after-free issue. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64700Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43822Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43810Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43807Critical
A buffer overflow was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a malicious accessory to cause unexpected app termination.
- CVE-2026-43803Critical
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a remote attacker to cause unexpected system termination.
- CVE-2026-43799Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43778Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43769Critical
An integer overflow was addressed with improved input validation. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker on the local network may be able to cause a denial-of-service.