CVE-2026-43799
A critical vulnerability in Apple’s operating systems allows an attacker to cause the system to crash unexpectedly. The flaw is a use‑after‑free bug that can be triggered by a malicious app. Apple has released patches in the latest OS updates.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Apple iOS, iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), tvOS, visionOS, and watchOS. Users of any device running a version older than the listed updates are at risk.
Real-world impact
An attacker could force the device to terminate, potentially disrupting services, losing unsaved data, or creating a denial‑of‑service condition. The crash could also be used to facilitate further attacks if the device is in a sensitive environment.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is exploitable over the network, requires no authentication, and compromises confidentiality, integrity, and availability. The lack of a user interface requirement means any app can trigger it, making the risk very high.
What to do about it
- 011. Update your device to the latest OS version (iOS 26.6 or later, iPadOS 26.6 or later, macOS Sequoia 15.7.8 or later, macOS Sonoma 14.8.8 or later, macOS Tahoe 26.6 or later, tvOS 26.6 or later, visionOS 26.6 or later, watchOS 26.6 or later).
- 022. Restart the device if prompted to complete the update.
NVD-referenced vendor advisory
Timeline
- Jul 27, 2026 · 3d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 28, 2026 · 2d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- support.apple.com/en-us/128066release notesvendor advisory
- support.apple.com/en-us/128067release notesvendor advisory
- support.apple.com/en-us/128068release notesvendor advisory
- support.apple.com/en-us/128069release notesvendor advisory
- support.apple.com/en-us/128070release notesvendor advisory
- support.apple.com/en-us/128071release notesvendor advisory
- support.apple.com/en-us/128072release notesvendor advisory