CVE-2026-43654
Memory Disclosure in Apple iOS and macOS
Publication date: 2026-05-11
Last updated on: 2026-05-11
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | ios | 18.7.9 |
| apple | ipados | 18.7.9 |
| apple | macos_sequoia | 15.7.7 |
| apple | macos_sonoma | 14.8.7 |
| apple | macos_tahoe | 26.5 |
| apple | tvos | 26.5 |
| apple | visionos | 26.5 |
| apple | watchos | 26.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an application to access and disclose kernel memory. This could lead to exposure of sensitive system information, potentially compromising the security and stability of the affected device.
Can you explain this vulnerability to me?
This vulnerability involves improper memory handling in certain Apple operating systems. Specifically, an application may be able to disclose kernel memory, which is sensitive and should be protected from unauthorized access.
The issue was addressed by improving memory handling and fixed in various Apple OS versions including iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your Apple devices to the fixed versions of the operating systems as soon as possible.
- iOS 18.7.9 and iPadOS 18.7.9
- iOS 26.5 and iPadOS 26.5
- macOS Sequoia 15.7.7
- macOS Sonoma 14.8.7
- macOS Tahoe 26.5
- tvOS 26.5
- visionOS 26.5
- watchOS 26.5
These updates include improved memory handling that addresses the vulnerability where an app may be able to disclose kernel memory.