CVE-2026-43684

CVE-2026-43684 is a use-after-free vulnerability in Apple's kernel memory management affecting iOS, iPadOS, and macOS. The flaw is triggered by an app running on the device: a malicious or already-compromised app may be able to cause unexpected system termination or corrupt kernel memory. Kernel memory corruption of this class is significant because it can potentially be developed into a privilege-escalation or sandbox-escape primitive, though Apple's advisory describes only termination and corruption as the impact. Users on iOS and iPadOS versions prior to 26.7, macOS Sequoia prior to 15.8, and macOS Golden Gate prior to 27 are affected, with fixes shipped in iOS/iPadOS 26.7, macOS Sequoia 15.8, and macOS Golden Gate 27. No public proof-of-concept is known and there is no indication of in-the-wild exploitation at this time.

What to do: Patch iPhones and iPads to iOS/iPadOS 26.7 and Macs to macOS Sequoia 15.8 or macOS Golden Gate 27, pushing the updates via MDM on managed fleets as a priority. Because exploitation requires a malicious or already-compromised app on the device, audit installed apps and restrict sideloading or non-App Store software on high-value endpoints. Monitor Apple's security advisory for researcher credit and any added exploitation notes, since kernel use-after-free bugs are common building blocks in full exploit chains and should not sit unpatched.