Vulnary
← back to the feed
Critical· 9.8official fix available

CVE-2026-43810

A critical vulnerability in Apple’s operating systems allows a remote attacker to crash the system or corrupt kernel memory. The flaw has been fixed in recent releases of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Updating to the latest OS version removes the risk.

publishedJul 27, 2026
last modifiedJul 29, 2026
sourcesNVD
severity · cvss
9.8
critical · how bad it is
exploitation · epss
<1%
44th percentile · chance of exploitation in 30 days
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →
auto-deletes from the system
counting…on Aug 27, 2026

An official fix is available, so this entry is kept for 30 days and then removed automatically.

01

Who is affected

All devices running iOS 26.5 or earlier, iPadOS 26.5 or earlier, macOS Sequoia 15.7.7 or earlier, macOS Sonoma 14.8.7 or earlier, macOS Tahoe 26.5 or earlier, tvOS 26.5 or earlier, visionOS 26.5 or earlier, and watchOS 26.5 or earlier.

02

Real-world impact

An attacker could send a specially crafted input that causes the system to terminate unexpectedly or corrupt kernel memory, potentially leading to denial of service or privilege escalation.

03

Why this severity

The CVSS score of 9.8 reflects that the vulnerability is exploitable over the network with no authentication, no user interaction, and can compromise confidentiality, integrity, and availability of the entire system.

04

What to do about it

official fix available
recommended steps
  1. 011. Update the device to the latest available OS version (iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, or watchOS 26.6).
  2. 022. Verify that the update has been applied successfully.

NVD-referenced vendor advisory

05

Timeline

  1. Jul 27, 2026 · 3d ago
    Published
    Disclosed and added to the National Vulnerability Database.
  2. Jul 28, 2026 · 2d ago
    Official fix available
    A vendor patch or mitigation now exists — see the remediation steps above.
06

How it’s attacked

Attack vectorNetwork (remote)
Attack complexityLow
Privileges requiredNone
User interactionNone needed
ScopeUnchanged
Confidentiality impactHigh
Integrity impactHigh
Availability impactHigh
07

References & advisories

NVD advisory ↗Search advisories ↗
(ai-assisted) A model wrote this summary from the official data, so double-check it against the source before you act on it. Read the official advisory →