AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-43667

Apple iOS and iPadOS: denial of service

Apple

CVE-2026-43667 · Published Aug 17, 2026 · updated Aug 25, 2026

Medium6.5
Fix: upgrade to 18.7.10 or later (3 fixed versions below)
Apple advisory

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to cause a denial-of-service.

Affected versions

PackageAffectedFixed in
iOS and iPadOS
Product
< 18.7.1018.7.10
< 26.526.5
macOS
Product
< 26.526.5
visionOS
Product
< 26.526.5
watchOS
Product
< 26.526.5
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-617

More Apple advisories

All Apple
Medium 5.4Aug 17Apple Safari: memory corruptionCVE-2026-65341fixed in 26.6.1 +3High 7.5Aug 17Apple iOS and iPadOS: use after freeCVE-2026-65343fixed in 26.6.1 +2High 8.8Aug 17Apple iOS and iPadOS: integer overflowCVE-2026-65346fixed in 26.6.1 +3Medium 6.5Aug 17Apple iOS and iPadOS: denial of serviceCVE-2026-65347fixed in 26.6.1 +2Medium 6.6Aug 17Apple iOS and iPadOS: out-of-bounds readCVE-2026-65349fixed in 26.6.1 +3Medium 4.3Aug 17Apple Safari: unhandled exceptional conditionCVE-2026-65351fixed in 26.6.1 +3