Use-After-Free in Apple OS 26.6 (iOS, macOS, tvOS, watchOS, iPadOS)
CVE-2026-43808 Published on September 14, 2026

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

NVD

Vulnerability Analysis

CVE-2026-43808 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
HIGH

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2026-43808 has been classified to as a Dangling pointer vulnerability or weakness.


Products Associated with CVE-2026-43808

Want to know whenever a new CVE is published for Apple products? stack.watch will email you.

Apple Ios And Ipados
 
Apple macOS
 
Apple tvOS
 
Apple watchOS
 

Affected Versions

Apple iOS and iPadOS: Apple macOS: Apple tvOS: Apple watchOS: