Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
Published: 2026-07-27
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw in the memory management of Apple operating systems may allow an application to trigger an unexpected system termination. This use‑after‑free flaw corresponds to CWE‑416 and can lead to denial of service. The vulnerability has been mitigated by improved memory handling in newer releases, but without the applied fixes a local application could cause the affected OS to crash, denying service to the user.

Affected Systems

Apple iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, tvOS, visionOS, and watchOS. The flaw has been addressed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

Risk and Exploitability

EPSS score of <1% indicates a low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 9.8 reflects critical severity, underscoring the risk of denial of service if triggered. The flaw can be triggered by an application that incorrectly accesses freed memory during its execution, leading to a crash. Attackers would need to run or entice the target system to run a malicious or vulnerable app, making the threat primarily local and application‑bound.

Generated by OpenCVE AI on August 3, 2026 at 16:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest OS updates for all Apple platforms—iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
  • After updating, restart each device to ensure the memory state is refreshed and the vulnerability is no longer exploitable.
  • Remove or update any non‑essential third‑party applications that may contain complex memory usage, and configure devices to permit only apps from trusted sources.

Generated by OpenCVE AI on August 3, 2026 at 16:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 03 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free Leading to Unexpected System Termination on Apple Platforms

Thu, 30 Jul 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free Leading to Unexpected System Termination on Apple Platforms

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 28 Jul 2026 02:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos
Vendors & Products Apple
Apple ios And Ipados
Apple macos
Apple tvos
Apple visionos
Apple watchos

Mon, 27 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
References

Subscriptions

Apple Ios And Ipados Ipados Iphone Os Macos Tvos Visionos Watchos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-07-28T15:59:51.652Z

Reserved: 2026-05-01T22:46:27.822Z

Link: CVE-2026-43822

cve-icon Vulnrichment

Updated: 2026-07-28T15:59:37.856Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-27T21:17:05.110

Modified: 2026-07-28T20:01:26.050

Link: CVE-2026-43822

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T16:15:03Z

Weaknesses