Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw that was remedied through improved memory management in the latest Apple operating systems. If triggered, it can cause the system to terminate unexpectedly or corrupt kernel memory, potentially leading to crashes or compromised system integrity.

Affected Systems

Affected products include Apple iOS and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Any device running an earlier release of these operating systems is vulnerable, including iPhones, iPads, Macs, Apple TVs, Vision Pro headsets, and Apple Watches.

Risk and Exploitability

The EPSS score is < 1%, indicating a very low but non‑zero exploitation probability. The vulnerability remains not listed in CISA’s KEV catalog, so no confirmed exploits are known. However, the potential for kernel memory corruption indicates a high severity threat. The attack vector is not explicitly stated, but use‑after‑free flaws generally require the attacker to interact with or compromise an application, which could lead to a local or application‑compromise scenario. Until a patch is applied, administrators should treat this as a significant risk.

Generated by OpenCVE AI on August 4, 2026 at 13:46 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update all Apple devices to the latest operating‑system releases (iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6).
  • Restart devices after applying the updates to clear any lingering volatile state.
  • Notify users about the vulnerability and recommend they install the latest OS updates as soon as possible.

Generated by OpenCVE AI on August 4, 2026 at 13:46 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 14:15:00 +0000

Type Values Removed Values Added
Title Use After Free Leading to System Termination or Kernel Corruption

Thu, 30 Jul 2026 01:45:00 +0000

Type Values Removed Values Added
Title Use After Free Leading to System Termination or Kernel Corruption

Tue, 28 Jul 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 28 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T16:32:11.679Z

Reserved: 2026-05-01T22:46:27.819Z

Link: CVE-2026-43778

cve-icon Vulnrichment

Updated: 2026-07-28T16:00:17.953Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:02.203

Modified: 2026-07-29T20:28:38.060

Link: CVE-2026-43778

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T14:00:03Z

Weaknesses