Race Condition Vulnerability in Apple iOS and macOS Products
CVE-2026-43805

9.8CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Watch OS
Vendor
CVE Published:
27 July 2026

What is CVE-2026-43805?

A race condition vulnerability has been identified in Apple iOS and macOS products, where improper state handling could lead to unexpected system terminations or allow an app to write unauthorized kernel memory. This flaw has been addressed in recent updates across various Apple platforms, including iOS 26.6 and macOS versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. Users are encouraged to update their devices promptly to mitigate potential security risks.

Affected Version(s)

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.8

macOS 0 < 15.7.8

References

https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.