CVE-2026-43686

Undergoing Analysis Undergoing Analysis - In Progress

Use-After-Free in Apple iOS and macOS via Malicious NFS Server

Publication date: 2026-09-14

Last updated on: 2026-09-16

Assigner: Apple Inc.

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-16

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-04

NVD

CVE-2026-43686

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ios	26.7
apple	ipados	26.7
apple	ios	27
apple	ipados	27
apple	macos_golden_gate	27
apple	macos_sequoia	15.8
apple	macos_tahoe	26.7
apple	tvos	27
apple	visionos	27
apple	watchos	27

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability caused by improper memory management. When a system connects to a malicious NFS server, it may corrupt kernel memory, potentially leading to system instability or unauthorized access.

Detection Guidance

This vulnerability is specific to Apple operating systems and relates to NFS server interactions. Detection primarily involves checking for kernel memory corruption after connecting to an NFS server. Monitor system logs for crashes or unusual behavior following NFS connections. Ensure your Apple devices are updated to the latest versions mentioned in the CVE description.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your device with kernel privileges, leading to system crashes, data loss, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations must ensure affected systems are patched to maintain compliance.

Mitigation Strategies

Update affected Apple devices to the specified versions: iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, or watchOS 27. Avoid connecting to untrusted NFS servers until updates are applied.

Hi! I’m here to help you understand CVE-2026-43686. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70