Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.
Published: 2026-09-14
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Kernel memory corruption leading to potential system crash
Action: Immediate Patch
AI Analysis

Impact

A use‑after‑free bug was found in Apple’s operating systems that allows an application to access freed memory. This flaw can lead to corruption of kernel memory, resulting in unexpected system termination or a compromise of kernel integrity. The vulnerability is a classic memory mismanagement issue that can subvert normal system execution flow.

Affected Systems

The vulnerability affects Apple iOS and iPadOS versions at or below 26.6, as well as macOS Golden Gate prior to version 27 and macOS Sequoia prior to 15.8. Users running any of these operating system releases remain at risk until they apply the latest update.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity of the vulnerability. The EPSS score is <1%, indicating a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because it can be triggered by a local application, the attack vector is inferred to be local or application‑based. Based on the description, it is inferred that the impact includes loss of availability due to potential system crashes.

Generated by OpenCVE AI on September 20, 2026 at 20:49 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest OS update—iOS 26.7 and iPadOS 26.7 for iOS devices, macOS Golden Gate 27 and macOS Sequoia 15.8 for Macs—so that the memory‑management fix is in place.
  • Force a reboot after the update to ensure that all system components use the corrected routines immediately.
  • Keep an eye on system logs for kernel panics or abnormal termination patterns and seek Apple support if such events recur.

Generated by OpenCVE AI on September 20, 2026 at 20:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 20 Sep 2026 21:15:00 +0000

Type Values Removed Values Added
Title Use-After‑Free in Apple OS Allows Kernel Corruption and System Crash

Wed, 16 Sep 2026 12:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Apple macOS and iOS Leading to Kernel Memory Corruption

Tue, 15 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple ipados
Apple iphone Os
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple ipados
Apple iphone Os

Tue, 15 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 11:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Apple macOS and iOS Leading to Kernel Memory Corruption
Weaknesses CWE-416

Mon, 14 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Vendors & Products Apple
Apple ios And Ipados
Apple macos

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-09-16T03:56:41.724Z

Reserved: 2026-05-01T22:46:21.641Z

Link: CVE-2026-43684

cve-icon Vulnrichment

Updated: 2026-09-15T18:20:33.658Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-14T21:17:07.800

Modified: 2026-09-16T04:18:22.410

Link: CVE-2026-43684

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T21:00:05Z

Weaknesses