Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-20700

Apple Multiple Buffer Overflow Vulnerability

7.8
CVSS 3.1
1
story
FEB 12
added to KEV
Severity
7.8 High · vendor score
Vendor
Apple
Product
Multiple Products
Published
Feb 11, 2026
Added to KEV
Feb 12, 2026
KEV deadline
Mar 5, 2026
Ransomware use
Unknown
Weakness
CWE-119

What it is

Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesApple Patches iOS Zero Day CVE-2026-20700That vulnerability also was patched in macOS, but the active exploitation that Apple disclosed was against iOS only.DENNIS FISHER · 1 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Fixsupport.apple.com/en-us/126346Fixsupport.apple.com/en-us/126348Fixsupport.apple.com/en-us/126351Fixsupport.apple.com/en-us/126352