CVE-2026-437237.8High

CVE-2026-43723: Apple iOS and iPadOS vulnerability

Apple · iOS and iPadOS

Vendor fix available · Affected: Apple iOS and iPadOS · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.2%probability of exploitation in the next 30 days

8th percentile

050100

Higher than 8% of scored CVEs

7.8HighCVSS

LowMediumHighCrit.

DescriptionNVD

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to gain root privileges.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Path Traversal · File and Path Handling
Vendor: Apple
Published: July 2026
Band: Unlikely (under 1%), July 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 13 Aug.

13 Aug 16:11
Apple patches root privilege flaw in mediaremoted on iOS, macOS
SecurityOnline · first in our coverage

New articles also arrive in the RSS feed.