CVE-2026-43801

Analyzed Analyzed - Analysis Complete

Memory Corruption in Apple iOS and iPadOS

Publication date: 2026-07-27

Last updated on: 2026-07-28

Assigner: Apple Inc.

Description

This issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-28

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-43801

EUVD

EUVD-2026-49519

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 14.0 (inc) to 14.8.8 (exc)
apple	macos	From 15.0 (inc) to 15.7.8 (exc)
apple	macos	From 26.0 (inc) to 26.6 (exc)
apple	ipados	to 26.6 (exc)
apple	iphone_os	to 26.6 (exc)
apple	tvos	to 26.6 (exc)
apple	visionos	to 26.6 (exc)
apple	watchos	to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability allows an app to access sensitive user data due to insufficient checks in the affected operating systems. It was addressed and fixed in specific versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.

Detection Guidance

This vulnerability is specific to Apple operating systems and requires updating to fixed versions. Detection involves checking system versions rather than running commands. For iOS/iPadOS, go to Settings > General > Software Update. For macOS, go to System Settings > General > Software Update. Ensure your device is running iOS 26.6 or later, macOS Sequoia 15.7.8 or later, macOS Sonoma 14.8.8 or later, macOS Tahoe 26.6 or later, tvOS 26.6 or later, visionOS 26.6 or later, or watchOS 26.6 or later.

Impact Analysis

An attacker could exploit this to gain access to your personal or sensitive data through a malicious app. Updating to the fixed versions of the operating systems mitigates this risk.

Compliance Impact

The vulnerability allows an app to access sensitive user data, which could lead to unauthorized data exposure. This may violate compliance requirements under GDPR (data protection) and HIPAA (health information privacy) if such data includes personal or health-related information.

Mitigation Strategies

Update affected Apple devices to the latest versions: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, or watchOS 26.6 to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-43801. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70