CVE-2026-20700 Apple Multiple Products
Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.
- CVSS
- not scored
On CISA’s exploited list
Apple Multiple Buffer Overflow Vulnerability
- Added
- 2026-02-12
- Federal patch deadline
- 2026-03-05
- Ransomware use
- not known