← back
CVE-2026-43656

CVE-2026-43656

CVSS 7.3 HIGHEPSS 0.3%CWE-787
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 May 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Parsing a maliciously crafted file may lead to an unexpected app termination.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Apple · iOS and iPadOSApple · macOS
References
https://support.apple.com/en-us/127110https://support.apple.com/en-us/127111https://support.apple.com/en-us/127115https://support.apple.com/en-us/127116https://support.apple.com/en-us/127117