CVE-2026-43813
HIGH 7.1EPSS 0.2%
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.
- Affected
- Apple · iOS and iPadOS · macOS · tvOS · visionOS · watchOS
- CVSS v3.1 CNA
- 7.1 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - EPSS
- 0.17% chance of exploitation in the next 30 days, 6th percentile
- Published
- 2026-07-27
- Updated
- 2026-07-28
Proof-of-concept exploits (1)
- EastArctica/CVE-2026-438139★ · 2026-07-29
Security advisories
- https://support.apple.com/en-us/128066
- https://support.apple.com/en-us/128067
- https://support.apple.com/en-us/128068
- https://support.apple.com/en-us/128069
- https://support.apple.com/en-us/128070