NCSC-2026-0215 [1.00] [M/H] Vulnerabilities fixed in Apple iOS and iPadOS
Apple has fixed multiple vulnerabilities in iOS and iPadOS. The vulnerabilities include out-of-bounds access, use-after-free, memory handling errors, insufficient input validation, type confusion, double free, stack overflow, race conditions, and path handling issues. These errors can lead to unexpected crashes of processes, memory corruption, unauthorized access to sensitive data such as clipboard content and kernel state, and bypassing sandbox restrictions. Malicious actors can exploit these vulnerabilities by providing specially crafted web content or applications that trigger the mentioned errors, resulting in process instability, system termination, or data leaks. The vulnerabilities have been resolved through improved bounds checking, input validation, memory management, state management, and security controls in the affected software components.
CSIRTS triage
- What
- Multiple vulnerabilities can lead to crashes, memory corruption, and unauthorized access to sensitive data.
- Who is affected
- Users of iOS and iPadOS devices.
- Urgency
- Remediation is urgent due to the potential for exploitation and data leaks.
- Action
- Update to the latest version of iOS and iPadOS.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch iOS and iPadOS
Get an email when a new iOS and iPadOS advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0215
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-289790.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
- Low exploitation riskCVE-2026-398680.37% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 29% of all scored CVEs.
- Low exploitation riskCVE-2026-398720.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-436630.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-436760.26% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all scored CVEs.
- Low exploitation riskCVE-2026-436990.24% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 15% of all scored CVEs.
- Low exploitation riskCVE-2026-437000.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all scored CVEs.
- Low exploitation riskCVE-2026-437010.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all scored CVEs.
- Low exploitation riskCVE-2026-437030.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all scored CVEs.
- Low exploitation riskCVE-2026-437040.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownApple Products Multiple Vulnerabilitieshkcert
- unknownNCSC-2026-0214 [1.00] [M/H] Vulnerabilities fixed in Apple MacOSncsc-nl
- unknownMultiple vulnerabilities in Apple products (June 30, 2026)cert-fr-avis
- mediumCVE-2026-43746: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
- mediumCVE-2026-43745: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed…nvd
- mediumCVE-2026-43743: A race condition was addressed with improved state handling. This issue is fixed in iOS 26.5.2…nvd
- mediumCVE-2026-43742: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
- mediumCVE-2026-43740: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, i…nvd
- highCVE-2026-43735: The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2…nvd
- mediumCVE-2026-43734: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
- mediumCVE-2026-43732: A path handling issue was addressed with improved validation. This issue is fixed in Safari 26…nvd
- highCVE-2026-43731: A use-after-free issue was addressed with improved memory management. This issue is fixed in S…nvd
Recent advisories for Apple iOS and
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- criticalexploitedCVE-2023-41974: Apple iOS and iPadOS Use-After-Free Vulnerabilitycisa-kev · 2026-03-05
- criticalexploitedCVE-2025-43300: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerabilitycisa-kev · 2025-08-21
- criticalexploitedCVE-2025-24200: Apple iOS and iPadOS Incorrect Authorization Vulnerabilitycisa-kev · 2025-02-12
- criticalexploitedCVE-2023-42824: Apple iOS and iPadOS Kernel Privilege Escalation Vulnerabilitycisa-kev · 2023-10-05
- criticalexploitedCVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerabilitycisa-kev · 2023-09-11
- criticalexploitedCVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerabilitycisa-kev · 2023-09-11
More from NCSC-NL Advisories
- unknownNCSC-2026-0223 [1.00] [M/H] Vulnerabilities fixed in BeyondTrust Remote Support and Privileged Remote Access2026-07-10
- unknownNCSC-2026-0222 [1.00] [M/H] Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition2026-07-10
- unknownNCSC-2026-0221 [1.00] [M/H] Vulnerabilities fixed in UniFi products from Ubiquiti Networks2026-07-07
- unknownNCSC-2026-0220 [1.00] [M/H] Vulnerabilities fixed in Rancher by Rancher Labs2026-07-03
- unknownNCSC-2026-0219 [1.00] [M/H] Vulnerabilities fixed in GitHub Enterprise Server2026-07-03