6.5mediumMedium
CVE-2026-43667
Apple Ipados
A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to cause a denial-of-service.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, no special conditions are needed to exploit it.
- To exploit it, no account is needed.
- Beyond that, someone has to be persuaded to take an action first.
Scoring
- CVSS
- 6.5 (v3.1)
- Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H- Weakness
- CWE-617
- Assigned by
- product-security@apple.com
Dates
- Published
- 2026-08-17
- Last modified
- 2026-08-25
- Sources
- NVD
Affected products
- Apple Ipados- 18.7.10
- Apple Iphone Os- 18.7.10
As listed in the NVD configuration data. Not a statement about your estate.