⚠ Actively exploited
Added to CISA KEV on 2026-02-12. Federal agencies required to patch by 2026-03-05. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable..

CVE-2026-20700

CWE-119 — Buffer Overflow14 documents8 sources
Severity
7.8HIGH
EPSS
0.4%
top 42.36%
CISA KEV
KEV
Added 2026-02-12
Due 2026-03-05
Exploit
No known exploits
Affected products
7
Apple IOS AND IpadosApple MacosApple Tvos+4 more
Timeline
PublishedFeb 11
KEV addedFeb 12
KEV dueMar 5
Latest updateApr 1
CISA Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages11 packages

▶CVEListV5apple/tvos< 26.3
▶NVDapple/tvos< 26.3
▶CVEListV5apple/macos< 26.3
▶NVDapple/macos< 26.3
▶NVDapple/ipados< 26.3

🔴Vulnerability Details

3
GHSA
GHSA-j5x8-2r52-c3ff: A memory corruption issue was addressed with improved state management↗2026-02-12
▶
CVEList
CVE-2026-20700: A memory corruption issue was addressed with improved state management↗2026-02-11
▶
VulnCheck
Apple Multiple Buffer Overflow Vulnerability↗2026
▶

📋Vendor Advisories

6
CISA
Apple Multiple Buffer Overflow Vulnerability↗2026-02-12
▶
Apple
CVE-2026-20700: watchOS 26.3↗2026-02-11
▶
Apple
CVE-2026-20700: macOS Tahoe 26.3↗2026-02-11
▶
Apple
CVE-2026-20700: iOS 26.3 and iPadOS 26.3↗2026-02-11
▶
Apple
CVE-2026-20700: visionOS 26.3↗2026-02-11
▶

🕵️Threat Intelligence

4
Bleepingcomputer
Apple expands iOS 18 updates to more iPhones to block DarkSword attacks↗2026-04-01
▶
Bleepingcomputer
New DarkSword iOS exploit used in infostealer attack on iPhones↗2026-03-18
▶
Bleepingcomputer
Apple fixes zero-day flaw used in &#039;extremely sophisticated&#039; attacks↗2026-02-11
▶
Wiz
CVE-2026-20700 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2026-20700 (HIGH CVSS 7.8) | A memory corruption issue was addre | cvebase.io