← ExploitWatch
HomeExploited Vulnerabilities

CVE-2026-20700 — Actively Exploited: Multiple Products (Apple)

Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.

CVE IDCVE-2026-20700
VendorApple
ProductMultiple Products
Vulnerability nameApple Multiple Buffer Overflow Vulnerability
Date added2026-02-12
Remediation due2026-03-05
Known ransomware useUnknown
Required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
DescriptionApple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →