CVE-2026-43748PoC(apple / macos)

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch apple macos systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

apple CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://support.apple.com/en-us/128066

Weakness type (CWE)

CWE-787

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

macos

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 3 signals
PoC mentioned or linked in 4 signals
Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Peaked 2d ago at 2 mentions (2026-08-27); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

apple

Products

macos

Deep dive

Activity timeline4 mentions / 3d

Signal classification1 categories

PoC

4100.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-27	2	PoC2
2026-08-28	1	PoC1
2026-09-03	1	PoC1

Full discourse4 posts

Vladislav Shevchenko@destr4ctt46d
PoC
Sharing details & PoC for CVE-2026-43748, a heap OOB-write in ANEHWDevice::ANE_ProgramCheckandPrewireBuffers_gated (Apple Neural Engine) Vulnerability was fixed in iOS 26.6 update. And for some reason, Apple missed me in advisory... Frustrating :( https://github.com/vschko/CaseStudies/tree/main/CVE-2026-43748
Post summary
The post shares details and a PoC for CVE-2026-43748, notes the issue was fixed in iOS 26.6, and provides a GitHub link to the exploit code.
42501617714.7K
450 followersView on X
MMdAS@MchinaMd5776446d
PoC
@destr4ctt poc from Vladislav Shevchenko https://github.com/vschko/CaseStudies/tree/main/CVE-2026-43748
Post summary
A Proof of Concept for CVE‑2026‑43748 has been shared by Vladislav Shevchenko on GitHub, providing code that demonstrates the vulnerability.
000852.9K
582 followersView on X
Daily CyberSecurity@Daily_CyberSec40d
PoC
CVE-2026-43748 (CVSS 9.8) is an Apple ANE kernel OOB write reachable from a sandbox. Full details and macOS/iOS PoC code are now public. Update now. #Apple #CVE202643748 #iOS #macOS #KernelBug #InfoSec #ANE https://securityonline.info/apple-ane-cve-2026-43748/ https://t.co/3ZcEdzYhul
Post summary
Apple disclosed CVE-2026-43748, a kernel out‑of‑bounds write with a CVSS score of 9.8, and released PoC code for macOS and iOS. No patch or evidence of active exploitation has yet been reported.
03034652
13.0K followersView on X
Rıdvan Yağlı@ridvanyagli46d
PoC
🔴 Apple Neural Engine'de heap out-of-bounds write açığı (CVE-2026-43748) için Vladislav Shevchenko tarafından PoC yayınlandı! Açık, ANEHWDevice bileşenindeki bellek sınırı kontrolü hatasından kaynaklanıyor ve iOS 26.6 güncellemesiyle yamalandı. https://github.com/vschko/CaseStudies/tree/main/CVE-2026-43748
Post summary
A PoC for a heap out-of-bounds write in Apple Neural Engine was released by Vladislav Shevchenko, and Apple patched the issue in the iOS 26.6 update.
00000287
2.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-

Explore more

Back to dashboard apple CVEs macos vulnerabilities

What researchers are saying

CVE-2026-43748

Rıdvan Yağlı[verified]@ridvanyagliPoC

A PoC for a heap out-of-bounds write in Apple Neural Engine was released by Vladislav Shevchenko, and Apple patched the issue in the iOS 26.6 update.

Vladislav Shevchenko@destr4cttPoC

The post shares details and a PoC for CVE-2026-43748, notes the issue was fixed in iOS 26.6, and provides a GitHub link to the exploit code.

MMdAS@MchinaMd57764PoC

A Proof of Concept for CVE‑2026‑43748 has been shared by Vladislav Shevchenko on GitHub, providing code that demonstrates the vulnerability.

Daily CyberSecurity@Daily_CyberSecPoC

Apple disclosed CVE-2026-43748, a kernel out‑of‑bounds write with a CVSS score of 9.8, and released PoC code for macOS and iOS. No patch or evidence of active exploitation has yet been reported.