Exploit / PoCcritical

Apple fixes zero-day flaw exploited in targeted attacks (CVE-2026-20700)

Help Net Securityby @zeljkazorzFeb 12, 2026 · 00:00 UTC (Feb 12, 2026)1 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2026-20700 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-20700 CVE-2025-14174 CVE-2025-43529

Tags: cve-2026-20700 cve-2025-14174 cve-2025-43529 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-14174	Out of Bounds Memory Access in Google Chromium ANGLE Affects Chrome, Edge, Opera	8.8	55%	KEV	Dec 12, 2025 KEV Dec 12, 2025
CVE-2025-43529	Use-After-Free in Apple WebKit (Safari, iOS, macOS) Allows Arbitrary Code Execution	8.8	26%	KEV	Dec 17, 2025 KEV Dec 15, 2025
CVE-2026-20700	Exploited Memory Corruption Flaw in Apple iOS, iPadOS, macOS, tvOS, visionOS, watchOS	7.8	2%	KEV	Feb 11, 2026 KEV Feb 12, 2026

From the original article

1 min read at helpnetsecurity.com

Apple has released fixes for a zero-day vulnerability (CVE-2026-20700) exploited in targeted attacks last year. CVE-2026-20700 is a memory corruption issue in dyld, the Dynamic Link Editor component of Apple’s operating systems, and may allow attackers with memory write capability to execute arbitrary code.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.