Race Condition Vulnerability in Apple iOS and macOS Products
CVE-2026-43805

9.8CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Watch OS
Vendor
CVE Published:
27 July 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-43805?

A race condition vulnerability has been identified in Apple iOS and macOS products, where improper state handling could lead to unexpected system terminations or allow an app to write unauthorized kernel memory. This flaw has been addressed in recent updates across various Apple platforms, including iOS 26.6 and macOS versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. Users are encouraged to update their devices promptly to mitigate potential security risks.

Affected Version(s)

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.8

macOS 0 < 15.7.8

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-43805-analysis
Created by WTCYJ

References

https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.