- Description
- A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to gain root privileges.
- Source
- product-security@apple.com
- NVD status
- Modified
- Products
- ipados, iphone_os, macos, tvos, visionos, watchos
CVSS 3.1
- Type
- Secondary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-22
- Hype score
- Not currently trending
IOS 26.3.1 iPhone 17 Pro Max CVE-2026-43654 -- kernel heap info leak CVE-2026-28972 -- type confusion CVE-2026-20687 -- AppleJPEGDriver UAF CVE-2026-43724 -- IOGPUFamily ownership bypass CVE-2026-43723 -- MediaRemote path traversal https://t.co/8zPolVLAdn
@Bara_8
22 Aug 2026
36 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
!! Apple dropped a new security update. Top 3 fixes I’d prioritize: CVE-2026-64747 - kernel-level code execution CVE-2026-43723 - possible root privilege escalation CVE-2026-65346 code execution via malicious image processing If you manage Apple devices, patch these first. h
@m4rio_eth
18 Aug 2026
710 Impressions
1 Retweet
5 Likes
0 Bookmarks
1 Reply
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AB0E13A1-17E9-4198-A359-304F8145F34F",
"versionEndExcluding": "26.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"matchCriteriaId": "622D61A7-C893-4550-800A-8CEDE14F3033",
"versionEndExcluding": "26.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9FFAC61B-E4F2-49AF-9897-96D35FAD611C",
"versionEndExcluding": "14.8.8",
"versionStartIncluding": "14.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B3E01512-81BB-4C92-B0A5-C07F1C1A432E",
"versionEndExcluding": "15.7.8",
"versionStartIncluding": "15.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8D3D83F1-07DF-47C2-9F3B-0BC5A1434606",
"versionEndExcluding": "26.6",
"versionStartIncluding": "26.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D461E49C-A6FA-4AFD-B557-FB066243A708",
"versionEndExcluding": "26.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "927CD91A-3CC7-42CE-BD20-CD6D7C9B4984",
"versionEndExcluding": "26.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BDA04143-9B99-429E-8970-B13AB5DBCDDC",
"versionEndExcluding": "26.6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]