{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20698", "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "state": "PUBLISHED", "assignerShortName": "apple", "dateReserved": "2025-11-11T14:43:07.877Z", "datePublished": "2026-03-25T00:31:57.939Z", "dateUpdated": "2026-03-25T00:31:57.939Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "An app may be able to cause unexpected system termination or corrupt kernel memory"}]}], "affected": [{"vendor": "Apple", "product": "iOS and iPadOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.4", "versionType": "custom"}]}, {"vendor": "Apple", "product": "macOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.4", "versionType": "custom"}]}, {"vendor": "Apple", "product": "tvOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.4", "versionType": "custom"}]}, {"vendor": "Apple", "product": "visionOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.4", "versionType": "custom"}]}, {"vendor": "Apple", "product": "watchOS", "versions": [{"version": "0", "status": "affected", "lessThan": "26.4", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory."}], "references": [{"url": "https://support.apple.com/en-us/126792"}, {"url": "https://support.apple.com/en-us/126794"}, {"url": "https://support.apple.com/en-us/126797"}, {"url": "https://support.apple.com/en-us/126798"}, {"url": "https://support.apple.com/en-us/126799"}], "providerMetadata": {"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple", "dateUpdated": "2026-03-25T00:31:57.939Z"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or corrupt kernel memory."}], "id": "CVE-2026-20698", "lastModified": "2026-03-25T15:41:58.280", "metrics": {}, "published": "2026-03-25T01:17:06.540", "references": [{"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/126792"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/126794"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/126797"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/126798"}, {"source": "product-security@apple.com", "url": "https://support.apple.com/en-us/126799"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Awaiting Analysis"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "iOS and iPadOS", "source": "cna", "vendor": "Apple"}, "product": "ios_and_ipados", "vendor": "apple"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "macOS", "source": "cna", "vendor": "Apple"}, "product": "macos", "vendor": "apple"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "tvOS", "source": "cna", "vendor": "Apple"}, "product": "tvos", "vendor": "apple"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "visionOS", "source": "cna", "vendor": "Apple"}, "product": "visionos", "vendor": "apple"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,26.4)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "watchOS", "source": "cna", "vendor": "Apple"}, "product": "watchos", "vendor": "apple"}], "analysis": {"en": {"generated_at": "2026-03-25T02:58:45.104478+00:00", "value": {"mitigation_remediation": ["Install the most recent operating system update (iOS 26.4, iPadOS 26.4, macOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4) to resolve the memory handling defect."], "summary": {"action": "Apply Patch", "impact": "Kernel Memory Corruption / System Crash"}, "threat_synthesis": {"affected_systems": "Apple devices running iOS, iPadOS, macOS, tvOS, visionOS, or watchOS are impacted. The issue has been addressed in operating system releases 26.4 for each platform. Users with versions prior to 26.4 should upgrade to the corresponding latest builds to avoid exposure.", "description_and_impact": "An improper handling of memory in system components can lead an application to trigger an unexpected termination of the operating system or to corrupt data stored at privileged levels. The vulnerability allows script or binary code to influence low\u2011level memory operations, potentially leading to loss of service or in\u2011depth damage to protected data structures. As the fault originates in kernel space, the consequences are critical for both confidentiality and integrity of the affected device.", "risk_and_exploitability": "No publicly available exploit metrics are defined for this vulnerability; however, it requires a privileged compromise or a malicious application to trigger the fault. The lack of disclosed exploitation cases and the fact that it is not listed in known exploit databases suggest a lower current threat level, yet the potential for kernel memory corruption warrants immediate attention. The severity is high because the flaw can lead to denial of service and compromise of critical system integrity if reached."}}}}, "created": "2026-03-25T11:36:47.721418+00:00", "title": "Memory Handling Issue Leading to System Crash or Kernel Corruption in Apple Platforms", "updated": "2026-03-25T20:56:31.217356+00:00", "vendors": ["apple", "apple$PRODUCT$ios_and_ipados", "apple$PRODUCT$macos", "apple$PRODUCT$tvos", "apple$PRODUCT$visionos", "apple$PRODUCT$watchos"], "weaknesses": ["CWE-119", "CWE-122"]}