PT-2026-7805 · Apple · Dyld +6

Published 2026-02-11 · Updated 2026-02-17 · CVE-2026-20700

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple products (affected versions not specified) iOS versions prior to 26.3 iPadOS versions prior to 26.3 macOS versions prior to Tahoe 26.3 tvOS versions prior to 26.3 watchOS versions prior to 26.3 visionOS versions prior to 26.3

Description A memory corruption vulnerability exists in Apple’s dyld (Dynamic Link Editor). This flaw, identified as CVE-2026-20700, allows attackers with memory write access to execute arbitrary code. The vulnerability has been actively exploited in sophisticated, targeted attacks against specific individuals. Google’s Threat Analysis Group discovered the issue and it has been addressed in the February 2026 security updates. The flaw has been exploited in conjunction with other vulnerabilities. It has existed in every iOS version since iOS 1.0.

Recommendations Update to iOS version 26.3. Update to iPadOS version 26.3. Update to macOS Tahoe version 26.3. Update to tvOS version 26.3. Update to watchOS version 26.3. Update to visionOS version 26.3.

Fix

LPE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2026-20700

Affected Products

Apple Macos

Dyld

Ios

Ipados

Tvos

Visionos

Watchos

References · 123

• https://support.apple.com/en-us/126352 · Vendor Advisory, Security Note
• https://support.apple.com/en-us/126346 · Vendor Advisory, Security Note
• https://support.apple.com/en-us/126348 · Vendor Advisory, Security Note
• https://support.apple.com/en-us/126353 · Vendor Advisory, Security Note
• https://support.apple.com/en-us/126351 · Vendor Advisory, Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-20700 · Security Note
• https://t.me/cveNotify/151914 · Telegram Post
• https://twitter.com/shakquraa/status/2023263623188300047 · Twitter Post
• https://twitter.com/SCMagazine/status/2023127929081770235 · Twitter Post
• https://twitter.com/ggmania/status/2022344470784512073 · Twitter Post
• https://twitter.com/vuln_tracker/status/2022554042258579549 · Twitter Post
• https://twitter.com/AIengineerlife/status/2023042563310305694 · Twitter Post
• https://twitter.com/AnonNews_irc/status/2023290667074519047 · Twitter Post
• https://twitter.com/ZyberWallS/status/2021975639184773229 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-20700 · Note