CVE-2026-43722

nvd.nist.gov • July 2, 2026

This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.

The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to leak sensitive kernel state.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in iOS and macOS Updates On June 29, 2026, Apple published updates addressing several critical vulnerabilities in iOS 26.5.2, iPadOS 26.5.2, and macOS Tahoe 26.5.2. The vulnerabilities include CVE-2026-43724, CVE-2026-43722, CVE-2026-39868, CVE-2026-43703, and CVE-2026-43743, which could allow apps to cause unexpected system termination, leak sensitive kernel state, or corrupt kernel memory. All vulnerabilities were fixed with improved input sanitization and memory handling. Users are urged to update their devices to mitigate these risks. The vulnerabilities affect a wide range of Apple devices running the specified operating systems. No active exploitation has been reported, but the potential impact is significant. The updates are critical for maintaining system integrity and security. 5 sources 58

Extracted Entities

CVE-2026-43722

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (3)