CVEFinder.io

CVE-2026-43686

⚠️ high
🔍 Scan for this CVE
Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

CVSS Score
8.8
High
EPSS Score
0.4
Exploit Probability
Published Date
2026-09-14
First Seen: 2026-09-16
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 80.8% of all 358,566 vulnerabilities in our database.

#68,827
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Sep 15, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-09-16
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-416

📦 Affected Products 7

Vendor Product Status Affected Versions
apple iphone_os Affected
< 26.7
apple watchos Affected
< 27.0
apple tvos Affected
< 27.0
apple ipados Affected
< 26.7
apple macos Affected
> 15.0 < 15.8
apple macos Affected
> 26.0 < 26.7
apple visionos Affected
< 27.0

🔗 References 8

https://support.apple.com/en-us/149034
Release Notes Vendor Advisory
https://support.apple.com/en-us/149035
Release Notes Vendor Advisory
https://support.apple.com/en-us/149036
Release Notes Vendor Advisory
https://support.apple.com/en-us/149037
Release Notes Vendor Advisory
https://support.apple.com/en-us/149038
Release Notes Vendor Advisory
https://support.apple.com/en-us/149041
Release Notes Vendor Advisory
https://support.apple.com/en-us/149042
Release Notes Vendor Advisory
https://support.apple.com/en-us/149043
Release Notes Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-28960 ⚠️ high 7.5 0.4 A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10.... 2026-09-14
CVE-2026-43664 🔶 medium 5.5 0.2 This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPad... 2026-09-14
CVE-2026-43684 ⚠️ high 7.8 0.2 A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, m... 2026-09-14
CVE-2026-43687 🔶 medium 6.5 0.4 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO... 2026-09-14
CVE-2026-43689 ⚠️ high 7.8 0.2 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 ... 2026-09-14
CVE-2026-64714 🔶 medium 5.5 0.2 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.... 2026-09-14
These CVEs affect the same products