Memory Corruption Vulnerability in Apple iOS and macOS Products
CVE-2026-64788

5.4MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
Vendor
CVE Published:
17 August 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-64788?

A memory corruption issue has been identified in Apple’s iOS and macOS systems, resulting from the processing of maliciously crafted web content. This vulnerability allows attackers to exploit the weakness, potentially leading to system instability or unauthorized access. Apple has addressed this issue with updates in iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2 to enhance memory management and protect users from possible threats.

Affected Version(s)

iOS and iPadOS 0 < 26.6.1

macOS 0 < 26.6.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-64788
Created by ByteV0rtex

iOS26.6-CVE-2026-64788
Created by AmorCool

References

https://support.apple.com/en-us/148281
https://support.apple.com/en-us/148282

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.