Product:
iOS
Summary
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 26.3, tvOS 26.3, macOS Tahoe 26.3, visionOS 26.3, iOS 26.3 and iPadOS 26.3. An attacker with memory write capability may be able to execute arbitrary code.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-20700 |
Exploitation
An attacker can exploit this vulnerability by gaining memory write capability on the affected devices. Once this capability is achieved, the attacker may execute arbitrary code, potentially leading to unauthorized access or control over the device. This exploitation requires a low level of complexity and does not necessitate user interaction.
Affected Products
- watchOS 26.3 – Fixed memory corruption issue with improved state management.
- tvOS 26.3 – Addressed the same memory corruption vulnerability.
- macOS Tahoe 26.3 – Resolved the memory corruption issue.
- visionOS 26.3 – Improved state management to fix the vulnerability.
- iOS 26.3 – Memory corruption issue fixed, preventing arbitrary code execution.
- iPadOS 26.3 – Addressed the memory corruption vulnerability.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the operating systems mentioned. Regularly applying updates helps protect against known vulnerabilities and enhances overall device security.