8.8 High
CVE-2026-43818
Apple iOS and iPadOS vulnerability
AppleiOS and iPadOS
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.6%probability of exploitation in the next 30 days
Higher than 45% of scored CVEs
SeverityCVSS
8.8High
Description NVD
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 28 Jul · 11:51 UTC | Malwarebytes | Apple patches ImageIO flaw CVE-2026-43818 in July OS updates |
| Thu 30 Jul · 15:50 UTC | thezdi.com | Apple July 2026 Patch Fixes 210 Flaws Including ImageIO Bug |
- Apple July 2026 Patch Fixes 210 Flaws Including ImageIO Bugthezdi.com
- Apple patches ImageIO flaw CVE-2026-43818 in July OS updatesMalwarebytes · first in our coverage