Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2026-20654: Apple OS apps can crash devices
CVE-2026-20654 · published 8 months ago
Summary
The latest versions of iOS, iPadOS, macOS, tvOS, visionOS and watchOS (version 26.3) fix a problem where a malicious app could cause the system to shut down unexpectedly. If you are running an older version, your devices could unexpectedly restart or shut off when a crafted app is used. Update your devices to the 26.3 release to eliminate the risk.
What to do
- Update apple ipados to version 26.3 or later.
- Update apple iphone_os to version 26.3 or later.
- Update apple macos to version 26.3 or later.
- Update apple tvos to version 26.3 or later.
- Update apple visionos to version 26.3 or later.
- Update apple watchos to version 26.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 26.3 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 26.3 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 26.3 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | tvos |
< 26.3 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | visionos |
< 26.3 cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 26.3 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpec...
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.
References
- https://support.apple.com/en-us/126346 Release Notes Vendor Advisory
- https://support.apple.com/en-us/126348 Release Notes Vendor Advisory
- https://support.apple.com/en-us/126351 Release Notes Vendor Advisory
- https://support.apple.com/en-us/126352 Release Notes Vendor Advisory
- https://support.apple.com/en-us/126353 Release Notes Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-119Buffer Overflow
Timeline
Published11 Feb 2026
Updated26 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-20654 · NVD
Track software like this
Free during beta