CVE-2026-43702
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequ
CVSS
7.8
High
EPSS
0.1%
p4
KEV
—
Exploit Today
1
0-100
Published: Sep 14, 2026 · Last modified: Sep 17, 2026 · CWE-119
0.1%EPSS · 30 days0.2%
2026-09-302026-10-28
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
- support.apple.comhttps://support.apple.com/en-us/128066
- support.apple.comhttps://support.apple.com/en-us/128067
- support.apple.comhttps://support.apple.com/en-us/128068
- support.apple.comhttps://support.apple.com/en-us/128069
- support.apple.comhttps://support.apple.com/en-us/149041
- support.apple.comhttps://support.apple.com/en-us/149042
- support.apple.comhttps://support.apple.com/en-us/149043
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1183598.8 HIG19.8%
——6Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)15hCVE-2026-1183588.8 HIG19.8%
——6Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)15hCVE-2026-1183528.8 HIG10.8%
——3Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)15hCVE-2026-1183518.8 HIG10.8%
——3Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)15hCVE-2026-1183498.8 HIG10.8%
——3Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)15hCVE-2026-1183409.6 CRI12.8%
——4Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)1h