CVE-2026-43714

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43714
The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. A malicious app may be able to access protected user data.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/128066 Release Notes Vendor Advisory
https://support.apple.com/en-us/128067 Release Notes Vendor Advisory
https://support.apple.com/en-us/128068 Release Notes Vendor Advisory
https://support.apple.com/en-us/128070 Release Notes Vendor Advisory
https://support.apple.com/en-us/128071 Release Notes Vendor Advisory
https://support.apple.com/en-us/128072 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
History

28 Jul 2026, 19:31

Type Values Removed Values Added
First Time Apple visionos
Apple macos
Apple
Apple watchos
Apple ipados
Apple iphone Os
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/128066 - () https://support.apple.com/en-us/128066 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128067 - () https://support.apple.com/en-us/128067 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128068 - () https://support.apple.com/en-us/128068 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128070 - () https://support.apple.com/en-us/128070 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128071 - () https://support.apple.com/en-us/128071 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/128072 - () https://support.apple.com/en-us/128072 - Release Notes, Vendor Advisory

28 Jul 2026, 16:17

Type Values Removed Values Added
CWE CWE-20
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

27 Jul 2026, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-07-27 21:16

Updated : 2026-07-28 19:31

NVD link : CVE-2026-43714

Mitre link : CVE-2026-43714

CVE.ORG link : CVE-2026-43714

JSON object : View

Products Affected

apple

  • ipados
  • watchos
  • visionos
  • macos
  • iphone_os
CWE
CWE-20

Improper Input Validation