Use After Free Vulnerability in Apple iOS and macOS Products
CVE-2026-20687

7.1HIGH

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Watch OS
Vendor: CVE Published:; 25 March 2026

What is CVE-2026-20687?

A use after free vulnerability in Apple iOS and macOS products could allow an app to manipulate memory, potentially leading to unexpected system termination or unauthorized kernel memory writes. This issue highlights the importance of robust memory management in preventing exploitation. Users are advised to update to the latest versions for improved security and stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS 0 < 18.7.7

iOS and iPadOS 0 < 26.4

macOS 0 < 15.7.5

References

https://support.apple.com/en-us/126792

https://support.apple.com/en-us/126793

https://support.apple.com/en-us/126794

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2026
Vulnerability Reserved
Nov 11, 2025

JSON

Apple

What is CVE-2026-20687?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.