Recently modified medium severity vulnerabilities for "apple tvos"

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may lead to a denial-of-service.

1 / 70

Source: MITRE

First published (updated )

CVE-2026-64693

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Risk 37

Severity

6.5

Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 160

Source: Apple

First published (updated )

CVE-2026-43821

Apple WatchOSBuffer Overflow, Input Validation, Infoleak

Risk 31

Severity

5.5

Buffer Overflow, Input Validation, Infoleak

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 10

Source: Apple

First published (updated )

CVE-2026-43801

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal, Infoleak

Risk 31

Severity

5.5

Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal, Infoleak

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 129

Source: Apple

First published (updated )

CVE-2026-43800

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak

Risk 31

Severity

5.5

Use After Free, Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 57

Source: Apple

First published (updated )

CVE-2026-43796

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 103

Source: Apple

First published (updated )

CVE-2026-43745

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected process crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=315161

1 / 95

Source: Red Hat

First published (updated )

CVE-2026-43742

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation

Risk 31

Severity

5.5

Use After Free, Buffer Overflow, Race Condition, Input Validation

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 35

Source: Apple

First published (updated )

CVE-2026-43744

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected process crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=313693

1 / 95

Source: Red Hat

First published (updated )

CVE-2026-43734

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected Safari crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=313175

1 / 104

Source: Red Hat

First published (updated )

CVE-2026-43720

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected process crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=313857

1 / 95

Source: Red Hat

First published (updated )

CVE-2026-43726

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 110

Source: MITRE

First published (updated )

CVE-2026-43717

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose sensitive user information.

1 / 102

Source: MITRE

First published (updated )

CVE-2026-43700

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 22

Severity

4.3

Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Accessibility. This issue was addressed through improved state management.

1 / 101

Source: Apple

First published (updated )

CVE-2026-43708

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management.

Impact: maliciously crafted web content may cause unexpected process crash

Advisory: https://webkitgtk.org/security/WSA-2026-0004.html WebKit Bug: https://bugs.webkit.org/showbug.cgi?id=317227

1 / 95

Source: Red Hat

First published (updated )

CVE-2026-43699

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free

Risk 37

Severity

6.5

Use After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 94

Source: Apple

First published (updated )

CVE-2026-43663

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 94

Source: Apple

First published (updated )

CVE-2026-39872

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Risk 31

Severity

5.5

Buffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to access sensitive user data.

1 / 112

Source: MITRE

First published (updated )

CVE-2026-28996

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Double Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Accessibility. This issue was addressed through improved state management.

1 / 110

Source: Apple

First published (updated )

CVE-2026-28979

Apple tvOSInput Validation, Buffer Overflow, Use After Free, Null Pointer Dereference, Integer Overflow, Race Condition

Risk 31

Severity

5.5

Input Validation, Buffer Overflow, Use After Free, Null Pointer Dereference, Integer Overflow, Race Condition

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

802.1X. An authentication issue was addressed with improved state management.

1 / 87

Source: Apple

First published (updated )

CVE-2026-28852

Apple tvOSUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow

Risk 42

Severity

6.5

Use After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

802.1X. An authentication issue was addressed with improved state management.

1 / 84

Source: Apple

First published (updated )

CVE-2026-20665

Apple tvOSUse After Free, Input Validation, Buffer Overflow, Integer Overflow

Risk 37

Severity

6.5

Use After Free, Input Validation, Buffer Overflow, Integer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

802.1X. An authentication issue was addressed with improved state management.

1 / 23

Source: Apple

First published (updated )

CVE-2026-20690

Trending

Versions

Apple macOS SonomaBuffer Overflow, Input Validation, Race Condition, Use After Free

Apple tvOSNull Pointer Dereference, Input Validation, Buffer Overflow, Use After Free, Integer Overflow

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Infoleak

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal

Apple WatchOSBuffer Overflow, Input Validation, Infoleak

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free, Path Traversal, Infoleak

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation, Integer Overflow, Infoleak

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple WatchOSUse After Free, Buffer Overflow, Race Condition, Input Validation

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple WatchOSDouble Free, Use After Free, Input Validation, Race Condition, Buffer Overflow, Integer Overflow

Apple WatchOSUse After Free, Buffer Overflow, Input Validation, Integer Overflow, Race Condition, Double Free

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple macOS TahoeBuffer Overflow, Input Validation, Race Condition, Use After Free, Integer Overflow, Null Pointer Dereference

Apple WatchOSDouble Free, Use After Free, Race Condition, Input Validation, Buffer Overflow, Integer Overflow

Apple tvOSInput Validation, Buffer Overflow, Use After Free, Null Pointer Dereference, Integer Overflow, Race Condition

Apple tvOSUse After Free, Input Validation, Null Pointer Dereference, Race Condition, Buffer Overflow

Apple tvOSUse After Free, Input Validation, Buffer Overflow, Integer Overflow

Company

Resources

Contact