Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A use after free issue was addressed with improved memory management. This issue may allow an app to cause unexpected system termination. The vulnerability affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-20637 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that takes advantage of the use after free condition. By executing this application on a vulnerable device, the attacker could potentially cause the system to terminate unexpectedly, leading to a denial of service.
Affected Products
- iOS 18.7.7 and earlier
- iPadOS 18.7.7 and earlier
- macOS Sequoia 15.7.5 and earlier
- macOS Sonoma 14.8.5 and earlier
- macOS Tahoe 26.3 and earlier
- tvOS 26.3 and earlier
- visionOS 26.3 and earlier
- watchOS 26.3 and earlier
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying updates helps ensure that known vulnerabilities are patched and reduces the risk of exploitation.