Memory corruption in macOS - CVE-2026-43810
Published: August 17, 2026
Vulnerability identifier: #VU143731
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-43810
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error in Kernel. A local user can trick the victim into opening a specially crafted file and cause unexpected system termination or corrupt kernel memory.
Affected software
macOS
visionOS
tvOS
iPadOS
Apple iOS
watchOS
visionOS
tvOS
iPadOS
Apple iOS
watchOS
How to mitigate CVE-2026-43810
Install update from vendor's website.
macOS - addressed in versions 26.6 25G72, 14.8.8 23J620, 15.7.8 24G824
visionOS - update to 26.6
tvOS - update to 26.6 23L773
iPadOS - addressed in versions 18.7.10 22H374, 26.6 23G71
Apple iOS - addressed in versions 18.7.10 22H374, 26.6 23G71
watchOS - update to 26.6 23U67
visionOS - update to 26.6
tvOS - update to 26.6 23L773
iPadOS - addressed in versions 18.7.10 22H374, 26.6 23G71
Apple iOS - addressed in versions 18.7.10 22H374, 26.6 23G71
watchOS - update to 26.6 23U67
External References
Related Security Bulletins
- Multiple vulnerabilities in macOS Tahoe
- Multiple vulnerabilities in macOS Sequoia
- Multiple vulnerabilities in macOS Sonoma
- Multiple vulnerabilities in iOS 26 and iPadOS 26
- Multiple vulnerabilities in Apple visionOS
- Multiple vulnerabilities in Apple tvOS
- Multiple vulnerabilities in Apple watchOS
- Multiple vulnerabilities in iOS 18 and iPadOS 18