Quick answers
- Is CVE-2026-65343 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-65343 being exploited in the wild.
- How severe is CVE-2026-65343?
- High severity, with a CVSS score of 7.5, published 17 August 2026.
- Which products and versions are affected?
- Apple iPadOS before 26.6.1.
- Is there a fix for CVE-2026-65343?
- A patch was published on 2026-08-17: iOS 26.6.1 and iPadOS 26.6.1 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-65343 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-65343?
- Check whether you run Apple iPadOS, Apple Iphone Os or Apple macOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
CVE-2026-65343 is a use-after-free vulnerability in the iOS and iPadOS kernel. The flaw was introduced through improper memory management in kernel code, allowing an attacker to reference memory after it has been freed. A remote attacker can trigger this issue without requiring authentication or user interaction, causing unexpected system termination (denial of service). The vulnerability was patched in iOS 26.6.1 and iPadOS 26.6.1 through improved memory management. While the impact is primarily availability-focused, use-after-free bugs in kernel code can potentially be leveraged for privilege escalation or information disclosure with additional exploitation techniques.
Affected products
- Apple iOS before 26.6.1
- Apple iPadOS before 26.6.1
Timeline
- 2026-08-17: disclosed
- 2026-08-17: patched: iOS 26.6.1 and iPadOS 26.6.1 released