Product:
macOS, iOS, iPadOS, visionOS, Safari
Summary
The issue was addressed with improved memory handling. A remote attacker may be able to cause a denial-of-service. This issue is fixed in macOS Tahoe 26.3, iOS 18.7.5, iPadOS 18.7.5, visionOS 26.3, iOS 26.3, and iPadOS 26.3.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-20652 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network packets to the affected devices. If successful, this could lead to a denial-of-service condition, causing the device to become unresponsive or crash.
Affected Products
- macOS Tahoe: Affected by the memory handling issue, leading to potential denial-of-service.
- iOS: Vulnerable versions include 18.7.5 and 26.3, which may be exploited remotely.
- iPadOS: Similar vulnerabilities exist in versions 18.7.5 and 26.3.
- visionOS: The 26.3 version is also affected by this issue.
- Safari: Version 26.3 is impacted, allowing for potential remote attacks.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions provided by Apple. Regularly applying security updates is crucial to protect against potential exploits.