AppleCVE-2026-43657

Apple iOS and iPadOS: improper privilege management

CVE-2026-43657 · Published Aug 25, 2026 · updated Aug 31, 2026

Low3.3

Fix: upgrade to 26.5 or later

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps.

Affected versions

Package	Affected	Fixed in
iOS and iPadOS Product	< 26.5	26.5

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity from: CISA (its enrichment of the CVE record)
Weakness: CWE-269

More Apple advisories

All Apple

HighAug 30

## Impact An attacker who can choose a container or exec id may be able to...GHSA-x7pf-2jmj-pgcqfixed in 0.41.0 Medium 5.5Aug 25

Apple iOS and iPadOS: buffer overflowCVE-2026-64705fixed in 26.6 +2 Medium 5.5Aug 25

Apple iOS and iPadOS: null pointer dereferenceCVE-2026-65367fixed in 18.7.9 +1 High 8.8Aug 25

Apple Safari: protection mechanism failureCVE-2026-43670fixed in 26.5 +2 Low 2.4Aug 21

Apple watchOS: improper access controlCVE-2026-43679fixed in 26.4 Medium 4.3Aug 21

Apple macOS: out-of-bounds readCVE-2026-20679fixed in 14.8.5 +2