PT-2026-27541 · Apple · Macos Tahoe+6

Published 2026-03-24 · Updated 2026-04-15 · CVE-2026-20687

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Tahoe versions prior to 26.4 tvOS versions prior to 26.4 watchOS versions prior to 26.4

Description A use after free issue exists in the AppleJPEGDriver. A use after free is a memory corruption flaw that occurs when a program continues to use a pointer after the memory it points to has been freed. This could allow an app to cause unexpected system termination or write kernel memory.

Recommendations Update to version 18.7.7 or 26.4 for iOS. Update to version 18.7.7 or 26.4 for iPadOS. Update to version 15.7.5 for macOS Sequoia. Update to version 26.4 for macOS Tahoe. Update to version 26.4 for tvOS. Update to version 26.4 for watchOS.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-20687

Affected Products

Apple Macos

Ios

Ipados

Macos Sequoia

Macos Tahoe

Tvos

Watchos

References · 10

• https://support.apple.com/en-us/126794 · Vendor Advisory
• https://support.apple.com/en-us/126793 · Vendor Advisory
• https://support.apple.com/en-us/126795 · Vendor Advisory
• https://support.apple.com/en-us/126797 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20687 · Security Note
• https://support.apple.com/en-us/126798 · Vendor Advisory
• https://support.apple.com/en-us/126792 · Vendor Advisory
• https://twitter.com/zeroxjf/status/2043480371329638639 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20687 · Note
• https://twitter.com/CVEarity/status/2044461998373802075 · Twitter Post