CVE-2026-43664Disclosure(apple / ipados)

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access sensitive user data.

apple CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
tvos

Threat summary

Public PoC is present in monitored signal
5 mentions across 5 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 4d ago at 1 mentions (2026-09-14); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

apple

Products

ipadosiphone_osmacostvoswatchos

Deep dive

Activity timeline5 mentions / 5d

Signal classification3 categories

Disclosure

250.0%

General

125.0%

PoC

125.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-14	1	General1
2026-09-18	1	Disclosure1
2026-10-10	1	Disclosure1
2026-10-15	1	PoC1

Full discourse5 posts

Ilya Andr@andrd3v46d
General
CVE-2026-43664 CVE-2026-65345 CVE-2026-86905 CVE-2026-84606 CVE-2026-84625 CVE-2026-84623 CVE-2026-86878
Post summary
The input text is a raw list of seven CVE identifiers (CVE-2026-43664, CVE-2026-65345, CVE-2026-86905, CVE-2026-84606, CVE-2026-84625, CVE-2026-84623, CVE-2026-86878) devoid of any contextual intelligence, technical details, or actionable indicators.
730792113.0K
181 followersView on X
Speedyfriend67@speedyfriend43342d
Disclosure
Two CVEs were published in iOS 27 security update! CVE-2026-43664 (AirPods info leak) CVE-2026-84636 (WiFi info leak) Busy with military service these days 😓 https://t.co/FmZGmeIoyN
Post summary
The text is a brief disclosure announcement of two CVEs (CVE-2026-43664 AirPods info leak, CVE-2026-84636 WiFi info leak) included in an iOS 27 security update, with no exploit details, PoC, or remediation guidance.
552611620.5K
2.7K followersView on X
Speedyfriend67@speedyfriend4331d
https://github.com/speedyfriend433/CVE-2026-43664 Here’s PoC for CVE-2026-43664, The AirPods Info Disclosure bug! "The Magic Of NSUserDefaults…"
32037121.9K
2.8K followersView on X
Shashwath Manjunath@Sasobhabha20d
Disclosure
@thejailbreakhub 1. Entry Point: Use a WebKit bug (like CVE-2026-84635) 2. Sandbox Escape: Defeat user privacy restrictions (CVE-2026-43664) 3. Kernel Mapping: Use CVE-2026-65415 4. Root Access: Execute CVE-2026-84566
Post summary
The text outlines a multi-stage attack chain and associates several CVEs with its stages. It provides technical context but no PoC, named exploit tool, remediation, or claim of active exploitation.
10020185
53 followersView on X
Shashwath Manjunath@Sasobhabha16d
PoC
@thejailbreakhub @thejailbreakhub I have the next jailbreak chain: https://www.icloud.com/notes/0a5givct8Rg767-pnHSGuCPyg 1. Entry Point: Use a WebKit bug (like CVE-2026-84635) 2. Sandbox Escape: Defeat user privacy restrictions (CVE-2026-43664) 3. Kernel Mapping: Use CVE-2026-65415 4. Root Access: Execute CVE-2026-84566
Post summary
The tweet discloses a jailbreak exploitation chain using four CVEs as sequential steps and links to detailed notes, sharing proof-of-concept methodology without naming specific exploit tools or reporting active exploitation.
00010183
53 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
OS	apple	tvos	-	-	-
OS	apple	watchos	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities

What researchers are saying

CVE-2026-43664

Speedyfriend67[verified]@speedyfriend433Disclosure

The text is a brief disclosure announcement of two CVEs (CVE-2026-43664 AirPods info leak, CVE-2026-84636 WiFi info leak) included in an iOS 27 security update, with no exploit details, PoC, or remediation guidance.

Ilya Andr@andrd3vGeneral

The input text is a raw list of seven CVE identifiers (CVE-2026-43664, CVE-2026-65345, CVE-2026-86905, CVE-2026-84606, CVE-2026-84625, CVE-2026-84623, CVE-2026-86878) devoid of any contextual intelligence, technical details, or actionable indicators.

Shashwath Manjunath@SasobhabhaDisclosure

The text outlines a multi-stage attack chain and associates several CVEs with its stages. It provides technical context but no PoC, named exploit tool, remediation, or claim of active exploitation.

Shashwath Manjunath@SasobhabhaPoC

The tweet discloses a jailbreak exploitation chain using four CVEs as sequential steps and links to detailed notes, sharing proof-of-concept methodology without naming specific exploit tools or reporting active exploitation.