CVEvulnerability
CVE-2026-43811
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-07-27
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-362
Description
A race condition was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6. An app may be able to modify protected parts of the file system.
Affected configurations
• apple ipados (< 26.6)
• apple iphone os (< 26.6)
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://support.apple.com/en-us/128066 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/148287 support.apple.com