SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-43818

HIGH · CVSS 8.8 EPSS 0.70% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

An integer overflow vulnerability exists in unspecified products, allowing attackers to exploit it through maliciously crafted images, potentially leading to arbitrary code execution. This high-severity issue has been addressed in recent updates for iOS, iPadOS, and macOS versions. Organizations using affected Apple products should prioritize applying the latest patches to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-43818
Severity
HIGH
CVSS
8.8
EPSS
0.70%

Original NVD Description

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-91748 HIGH CVE-2026-91744 MEDIUM CVE-2026-91727 HIGH CVE-2026-91712 HIGH CVE-2026-86924 MEDIUM CVE-2026-86917 HIGH