CVE-2026-43810

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 0.82%
EPSS Percentile: 56.98%
CISA KEV: Not listed

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 28-Jul-2026 04:17
Last Modified: 18-Aug-2026 05:17
EPSS Date: 2026-10-26
CWE: CWE-119, CWE-416, CWE-787

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

apple / ipados
Version / affected range: * · before (exclusive) 26.6
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple / iphone_os
Version / affected range: * · before (exclusive) 26.6
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple / macos
Version / affected range: * · from (inclusive) 14.0 · before (exclusive) 14.8.8
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / macos
Version / affected range: * · from (inclusive) 15.0 · before (exclusive) 15.7.8
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / macos
Version / affected range: * · from (inclusive) 26.0 · before (exclusive) 26.6
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
apple / tvos
Version / affected range: * · before (exclusive) 26.6
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
apple / visionos
Version / affected range: * · before (exclusive) 26.6
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
apple / watchos
Version / affected range: * · before (exclusive) 26.6
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

References

Last enrichment sync: 27-Oct-2026 03:31
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

“The one worth a second look is CVE-2026-43810, where Apple notes a remote user may be able to corrupt kernel memory, because remote changes the economics of an attack chain considerably,” commented Adam Boynton, senior Apple Patches 87 iOS and iPadOS Flaws and 155 in macOS Tahoe

People (1)

Vendors (1)

Products (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.