Use After Free Vulnerability in Apple iOS and macOS Products
CVE-2026-43822

9.8CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Visionos
Vendor
CVE Published:
27 July 2026

What is CVE-2026-43822?

A use after free vulnerability has been identified in Apple's iOS and macOS platforms, potentially allowing an app to execute unexpected system termination. This issue was addressed through enhanced memory management procedures. Affected versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and associated updates for tvOS, visionOS, and watchOS. Users are encouraged to apply the latest updates to ensure their devices remain secure.

Affected Version(s)

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.8

macOS 0 < 15.7.8

References

https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.