Use-After-Free Vulnerability in Apple iOS and macOS Products
CVE-2026-43808

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Watch OS
Vendor
CVE Published:
14 September 2026

What is CVE-2026-43808?

A use-after-free vulnerability has been identified in Apple's iOS, iPadOS, macOS, tvOS, and watchOS products, allowing an app to potentially execute unexpected behaviors. This flaw arises from improper memory management, which could lead to system termination or application crashes. Users are encouraged to update to the latest versions (26.6) to mitigate risks associated with this vulnerability and enhance overall system security.

Affected Version(s)

iOS and iPadOS 0 < 26.6

macOS 0 < 26.6

tvOS 0 < 26.6

References

https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.