Medium severity5.5NVD Advisory· Published Jul 27, 2026· Updated Aug 17, 2026

CVE-2026-43800

Description

An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iOSllm-fuzzy
Range: 18.7.10
Apple Inc./Ipadosllm-fuzzy2 versions
18.7.10+ 1 more
- (no CPE)range: 18.7.10
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.6
Apple Inc./macOS Tahoellm-fuzzy
Range: 26.6
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <26.6
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=26.0,<26.6
Apple Inc./tvOS
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Range: <26.6
Apple Inc./watchOS
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Range: <26.6

Patches

Vulnerability mechanics

References

support.apple.com/en-us/128066nvdRelease NotesVendor Advisory
support.apple.com/en-us/128067nvdRelease NotesVendor Advisory
support.apple.com/en-us/128068nvdRelease NotesVendor Advisory
support.apple.com/en-us/128069nvdRelease NotesVendor Advisory
support.apple.com/en-us/148287nvd

News mentions

Apple Patches iOS and macOS, (Mon, Aug 17th)
SANS Internet Storm Center · Aug 17, 2026
Apple Patches Everything (July 2026), (Wed, Jul 29th)
SANS Internet Storm Center · Jul 29, 2026

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000