Product:
iOS, iPadOS, macOS, tvOS, watchOS
Summary
A use after free issue was addressed with improved memory management. This issue may allow an app to cause unexpected system termination or write kernel memory. The problem has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-20687 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that takes advantage of the use after free condition. This application would need to be executed on a vulnerable device, requiring user interaction to install and run. Once executed, the app could potentially lead to system instability or unauthorized access to kernel memory.
Affected Products
- iOS 18.7.7 and earlier: Vulnerable to unexpected system termination.
- iPadOS 18.7.7 and earlier: Vulnerable to unexpected system termination.
- macOS Sequoia 15.7.5 and earlier: Vulnerable to unexpected system termination.
- macOS Tahoe 26.4 and earlier: Vulnerable to unexpected system termination.
- tvOS 26.4 and earlier: Vulnerable to unexpected system termination.
- watchOS 26.4 and earlier: Vulnerable to unexpected system termination.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, and watchOS as soon as possible. Keeping software up to date is crucial in protecting against known vulnerabilities.