CVE-2026-43808: Use After Free

Published Sep 14, 2026

Updated

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 26.6
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 26.6
Upgrade
Upgrade macOS Tahoe to a version that resolves this vulnerability.
Fixed in 26.6
Upgrade
Upgrade tvOS to a version that resolves this vulnerability.
Fixed in 26.6
Upgrade
Upgrade watchOS to a version that resolves this vulnerability.
Fixed in 26.6

Event History

Sep 14, 2026

CVE Published

via MITRE·08:51 PM

Data Sourced

via MITRE·08:51 PM

DescriptionWeakness

Frequently Asked Questions

What level of access would an attacker need to trigger this issue?

The issue is described as being triggerable by an app. The provided information does not say whether the app must already be installed, require user interaction, or need any special permissions.

What is the documented impact?

A malicious or faulty app may be able to cause unexpected system termination. The provided information does not describe data exposure, privilege escalation, or code execution.

Which systems have a documented fix?

Apple lists fixes in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.