Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw that Apple addressed through improved memory management. The issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6 and watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory, potentially leading to crashes or compromised system integrity.

Affected Systems

Devices running versions of Apple iOS, iPadOS, macOS, tvOS, visionOS, or watchOS older than the fixed releases are vulnerable. This includes iPhones, iPads, Macs, Apple TV devices, visionOS devices, and Apple Watches that are not on iOS 18.7.10 or 26.6, iPadOS 18.7.10 or 26.6, macOS Sequoia 15.7.8 or Sonoma 14.8.8 or Tahoe 26.6, tvOS 26.6, visionOS 26.6, or watchOS 26.6.

Risk and Exploitability

The EPSS score indicates very low but non‑zero exploitation probability. The CVSS score of 9.8 signals a critical severity, reflecting the potential for system termination and kernel memory corruption. The vulnerability remains not listed in the CISA KEV catalog, so no confirmed exploits are known. The attack vector is not explicitly stated, but based on typical use‑after‑free flaws, it is inferred that the attacker would need to interact with or compromise an application, leading to a local or application‑compromise scenario. Until a patch is applied, administrators should treat this as a significant risk.

Generated by OpenCVE AI on August 18, 2026 at 00:58 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update all Apple devices to the latest operating‑system releases (iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6).
  • Restart devices after applying the updates to clear any lingering volatile state.
  • Notify users about the vulnerability and recommend they install the latest OS updates as soon as possible.

Generated by OpenCVE AI on August 18, 2026 at 00:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 18 Aug 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free Exploit Causing System Termination or Kernel Corruption on Apple Platforms

Mon, 17 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
References

Tue, 04 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Title Use After Free Leading to System Termination or Kernel Corruption

Thu, 30 Jul 2026 01:45:00 +0000

Type Values Removed Values Added
Title Use After Free Leading to System Termination or Kernel Corruption

Tue, 28 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-08-17T21:29:03.817Z

Reserved: 2026-05-01T22:46:27.819Z

Link: CVE-2026-43778

cve-icon Vulnrichment

Updated: 2026-07-28T16:00:17.953Z

cve-icon NVD

Status : Modified

Published: 2026-07-27T21:17:02.203

Modified: 2026-08-17T22:17:11.297

Link: CVE-2026-43778

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-18T01:00:05Z

Weaknesses