Multiple vulnerabilities in Apple products (June 30, 2026)

unknownpublic exploitCVE-2026-43746 CVE-2026-43718 CVE-2026-43735 CVE-2026-43740 CVE-2026-43727 CVE-2026-39868

Multiple vulnerabilities have been discovered in Apple products. Some of them allow an attacker to cause data confidentiality breaches, data integrity breaches, and security policy bypass.

CSIRTS triage

vendor: Apple Information disclosureOther

What: Multiple vulnerabilities allow an attacker to cause data confidentiality breaches, data integrity breaches, and security policy bypass.
Who is affected: Users of various Apple products are affected.
Urgency: Remediation is urgent due to the potential for exploitation, although the severity is currently unknown.
Action: Users should apply the necessary updates as soon as they are available.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source: CERT-FR Avis de sécurité (FR · national-cert · site)
Severity: unknown
Published: 2026-06-30
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0818/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-437460.33% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 25% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437180.41% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 34% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437350.33% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437400.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437270.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.
Moderate exploitation riskCVE-2026-398681.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 66% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437050.51% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 41% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-289790.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437070.69% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 50% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-437170.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-43746	coverage & exploitation status	NVD · CVE.org
CVE-2026-43718	coverage & exploitation status	NVD · CVE.org
CVE-2026-43735	coverage & exploitation status	NVD · CVE.org
CVE-2026-43740	coverage & exploitation status	NVD · CVE.org
CVE-2026-43727	coverage & exploitation status	NVD · CVE.org
CVE-2026-39868	coverage & exploitation status	NVD · CVE.org
CVE-2026-43705	coverage & exploitation status	NVD · CVE.org
CVE-2026-28979	coverage & exploitation status	NVD · CVE.org
CVE-2026-43707	coverage & exploitation status	NVD · CVE.org
CVE-2026-43717	coverage & exploitation status	NVD · CVE.org
CVE-2026-43734	coverage & exploitation status	NVD · CVE.org
CVE-2026-43722	coverage & exploitation status	NVD · CVE.org
CVE-2026-43703	coverage & exploitation status	NVD · CVE.org
CVE-2026-43712	coverage & exploitation status	NVD · CVE.org
CVE-2026-43732	coverage & exploitation status	NVD · CVE.org
CVE-2026-43742	coverage & exploitation status	NVD · CVE.org
CVE-2026-43745	coverage & exploitation status	NVD · CVE.org
CVE-2026-43706	coverage & exploitation status	NVD · CVE.org
CVE-2026-43716	coverage & exploitation status	NVD · CVE.org
CVE-2026-43701	coverage & exploitation status	NVD · CVE.org
CVE-2026-43708	coverage & exploitation status	NVD · CVE.org
CVE-2026-39872	coverage & exploitation status	NVD · CVE.org
CVE-2026-43721	coverage & exploitation status	NVD · CVE.org
CVE-2026-43704	coverage & exploitation status	NVD · CVE.org
CVE-2026-43709	coverage & exploitation status	NVD · CVE.org
CVE-2026-43720	coverage & exploitation status	NVD · CVE.org
CVE-2026-43676	coverage & exploitation status	NVD · CVE.org
CVE-2026-43699	coverage & exploitation status	NVD · CVE.org
CVE-2026-43725	coverage & exploitation status	NVD · CVE.org
CVE-2026-43731	coverage & exploitation status	NVD · CVE.org
CVE-2026-43726	coverage & exploitation status	NVD · CVE.org
CVE-2026-43743	coverage & exploitation status	NVD · CVE.org
CVE-2026-43663	coverage & exploitation status	NVD · CVE.org
CVE-2026-43715	coverage & exploitation status	NVD · CVE.org
CVE-2026-43713	coverage & exploitation status	NVD · CVE.org
CVE-2026-43700	coverage & exploitation status	NVD · CVE.org
CVE-2026-43724	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[NEW] [high] Apple macOS, iOS and iPadOS: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] WebKitGTK: Multiple vulnerabilitiescert-bund
unknownNCSC-2026-0319 [1.00] [M/H] Vulnerabilities resolved in Apple iOS and iPadOSncsc-nl
unknownApple Products Multiple Vulnerabilitieshkcert
unknownMultiple vulnerabilities in Apple products (August 18, 2026)cert-fr-avis
high[NEW] [high] Apple macOS (Tahoe, Sonoma, and Sequoia): Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Apple Safari: Multiple vulnerabilitiescert-bund
medium[NEW] [medium] Apple iOS and iPadOS: Multiple vulnerabilitiescert-bund
unknownNCSC-2026-0267 [1.00] [M/H] Vulnerabilities fixed in Apple MacOSncsc-nl
unknownNCSC-2026-0266 [1.00] [M/H] Vulnerabilities fixed in Apple iOS and iPadOSncsc-nl
unknownApple Products Multiple Vulnerabilitieshkcert
unknownMultiple vulnerabilities in Apple products (July 28, 2026)cert-fr-avis

Recent advisories for Apple products

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownApple Products Multiple Vulnerabilitieshkcert · 2026-08-18
unknownMultiple vulnerabilities in Apple products (August 18, 2026)cert-fr-avis · 2026-08-18
unknownApple Products Multiple Vulnerabilitieshkcert · 2026-07-28
unknownMultiple vulnerabilities in Apple products (July 28, 2026)cert-fr-avis · 2026-07-28
unknownApple Products Multiple Vulnerabilitieshkcert · 2026-07-06
criticalexploitedCVE-2025-43510: Apple Multiple Products Improper Locking Vulnerabilitycisa-kev · 2026-03-20