← Voltar para CVEs

CVE-2026-20700

HIGHCISA KEV

7.8

Descricao

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado2/11/2026

Ultima modificacao3/25/2026

Fontekev

Avistamentos honeypot0

CISA KEV

FornecedorApple

ProdutoMultiple Products

Nome da vulnerabilidadeApple Multiple Buffer Overflow Vulnerability

Data inclusao KEV2026-02-12

Prazo de remediacao2026-03-05

Uso em ransomwareUnknown

Produtos afetados

apple:ipadosapple:iphone_osapple:macosapple:tvosapple:visionosapple:watchos

Fraquezas (CWE)

CWE-119

Referencias

https://support.apple.com/en-us/126346(product-security@apple.com)

https://support.apple.com/en-us/126348(product-security@apple.com)

https://support.apple.com/en-us/126351(product-security@apple.com)

https://support.apple.com/en-us/126352(product-security@apple.com)

https://support.apple.com/en-us/126353(product-security@apple.com)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20700(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.