Input Validation Flaw in Apple iOS and iPadOS Products
CVE-2026-43667

6.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Visionos
Watch OS
Vendor
CVE Published:
17 August 2026

What is CVE-2026-43667?

An input validation flaw has been identified in Apple’s iOS and iPadOS, which may allow an attacker with privileged network access to trigger a denial-of-service condition. This flaw has been addressed in versions 18.7.10 of both iOS and iPadOS, emphasizing the importance of keeping devices updated to safeguard against potential exploits.

Affected Version(s)

iOS and iPadOS 0 < 18.7.10

iOS and iPadOS 0 < 26.5

macOS 0 < 26.5

References

https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127115
https://support.apple.com/en-us/127119

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.