High severity7.8NVD Advisory· Published Jun 29, 2026· Updated Jul 27, 2026

CVE-2026-43724

Description

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected products

Apple Inc./Ipados2 versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.5.2
- (no CPE)range: = 26.5.2
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <26.5.2
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=26.0,<26.5.2
Apple Inc./tvOSllm-fuzzy
Range: = 26.6
Apple Inc./watchOSllm-fuzzy
Range: = 26.6
Apple Inc./Visionosllm-fuzzy
Range: = 26.6
Apple Inc./macOS Sequoiallm-fuzzy
Range: = 15.7.8
Apple Inc./macOS Sonomallm-fuzzy
Range: = 14.8.8
Apple Inc./macOS Tahoellm-fuzzy
Range: = 26.5.2
Apple Inc./iOSllm-fuzzy
Range: = 26.5.2

Patches

Vulnerability mechanics

References

support.apple.com/en-us/127594nvdVendor Advisory
support.apple.com/en-us/127595nvdVendor Advisory
support.apple.com/en-us/128068nvd
support.apple.com/en-us/128069nvd
support.apple.com/en-us/128070nvd
support.apple.com/en-us/128071nvd
support.apple.com/en-us/128072nvd

News mentions

Apple Patches Everything (July 2026), (Wed, Jul 29th)
SANS Internet Storm Center · Jul 29, 2026

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000