CVE-2026-43688

Published: Sep 14, 2026Modified: Sep 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.

Affected (3)

Products: Apple: Ipados, Iphone Os, Macos

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 27.0
Apple Iphone Os	version < 27.0
Apple Macos	version < 27.0

Related CWEs

CWE-1021

Improper Restriction of Rendered UI Layers or Frames

The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.

References (2)

https://support.apple.com/en-us/149034

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/149035

Source: product-security@apple.com

Release NotesVendor Advisory

Timeline

No history available yet.