CVE-2026-43666: Buffer Overflow
Accelerate. An out-of-bounds read was addressed with improved bounds checking.
Other sources
Accounts. A permissions issue was addressed with additional restrictions.
— Apple
Accounts. An authorization issue was addressed with improved state management.
— Apple
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An attacker on the local network may be able to cause a denial-of-service.
— NVD
APFS. A buffer overflow was addressed with improved bounds checking.
— Apple
App Intents. A logic issue was addressed with improved restrictions.
— Apple
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-28991
- CVE-2026-28988
- CVE-2026-28959
- CVE-2026-28995
- CVE-2026-1837
- CVE-2026-28956
- CVE-2026-39869
- CVE-2026-28922
- CVE-2026-28936
- CVE-2026-28918
- CVE-2026-28915
- CVE-2026-43659
- CVE-2026-28923
- CVE-2026-28925
- CVE-2026-43661
- CVE-2026-28977
- CVE-2026-28990
- CVE-2026-28978
- CVE-2026-28992
- CVE-2026-28943
- CVE-2026-28969
- CVE-2026-43655
- CVE-2026-43654
- CVE-2026-28908
- CVE-2026-28954
- CVE-2026-28897
- CVE-2026-28952
- CVE-2026-28951
- CVE-2026-28972
- CVE-2026-28986
- CVE-2026-28987
- CVE-2026-28983
- CVE-2026-28929
- CVE-2026-43653
- CVE-2026-28985
- CVE-2026-43668
- CVE-2026-43666
- CVE-2026-28941
- CVE-2026-28940
- CVE-2026-28961
- CVE-2026-28906
- CVE-2026-43656
- CVE-2026-43652
- CVE-2026-39870
- CVE-2026-28846
- CVE-2026-28993
- CVE-2026-28848
- CVE-2026-28930
- CVE-2026-28974
- CVE-2026-28996
- CVE-2026-28919
- CVE-2026-28924
- CVE-2026-39871
- CVE-2026-28976
- CVE-2026-43660
- CVE-2026-28907
- CVE-2026-28962
- CVE-2026-43658
- CVE-2026-28905
- CVE-2026-28847
- CVE-2026-28904
- CVE-2026-28955
- CVE-2026-28903
- CVE-2026-28953
- CVE-2026-28902
- CVE-2026-28901
- CVE-2026-28913
- CVE-2026-28883
- CVE-2026-28958
- CVE-2026-28917
- CVE-2026-28947
- CVE-2026-28946
- CVE-2026-28942
- CVE-2026-28971
- CVE-2026-28944
- CVE-2026-28819
- CVE-2026-28994
- CVE-2026-28914
- CVE-2026-28920
- CVE-2026-28964
- CVE-2026-28963
- CVE-2026-28957
- CVE-2026-28965
- CVE-2025-43524
- CVE-2026-28840
- CVE-2026-28878
- CVE-2026-28877
- CVE-2026-28872
- CVE-2026-28894
- CVE-2026-28870
- CVE-2026-28882
- CVE-2026-28873
Frequently Asked Questions
What is the severity of CVE-2026-43666?
CVE-2026-43666 has been classified as having a medium severity level due to its potential impact on affected systems.
How do I fix CVE-2026-43666?
To fix CVE-2026-43666, update your affected Apple products to the latest version available, specifically versions beyond 26.5 or related patches.
Which devices are affected by CVE-2026-43666?
CVE-2026-43666 affects multiple Apple products including macOS, iOS, iPadOS, visionOS, tvOS, watchOS, and macOS Sonoma running versions below specified updates.
What types of issues does CVE-2026-43666 address?
CVE-2026-43666 addresses various issues including out-of-bounds reads, permissions problems, and authorization issues.
Is immediate action required for CVE-2026-43666?
Yes, immediate action is recommended to mitigate potential risks from CVE-2026-43666 by updating to the latest software versions.