CVE-2026-20654 — Vulnetix

CVE-2026-20654 PUBLISHED CVSS 5.5 MEDIUM

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An app may be able to cause unexpected system termination.

EPSS 0.02% · 3.8th percentile

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.02%

3.8th percentile

Affected Products

Vendor	Product	Versions
apple	tvos	0
apple	ipados	0
apple	watchos	0
Apple	tvOS	0
Apple	iOS and iPadOS	0
Apple	macOS	0
Apple	visionOS	0
apple	iphone_os	0
apple	visionos	0
apple	macos	0
Apple	watchOS	0

Exploit Intelligence

CIRCL seen: CVE-2026-20654 (circl-sighting)
CIRCL seen: CVE-2026-20654 (circl-sighting)
https://support.apple.com/en-us/126346 (circl)
https://support.apple.com/en-us/126348 (circl)
https://support.apple.com/en-us/126351 (circl)
https://support.apple.com/en-us/126352 (circl)
https://support.apple.com/en-us/126353 (circl)
ios_v2_generated.go (github-poc)
ios_v1_generated.go (github-poc)
macos_v2_generated.go (github-poc)

…and 32 more exploits

Timeline

Feb 11, 2026 CVE Published
Feb 12, 2026 EPSS Score
Feb 12, 2026 PoC Published
Feb 12, 2026 PoC Published
Feb 14, 2026 EPSS Score
Feb 16, 2026 EPSS Score
Feb 18, 2026 EPSS Score
Feb 20, 2026 EPSS Score
Feb 22, 2026 EPSS Score
Feb 24, 2026 EPSS Score
Feb 26, 2026 EPSS Score
Feb 28, 2026 EPSS Score

References

https://support.apple.com/en-us/126346 advisory
https://support.apple.com/en-us/126353 advisory
https://support.apple.com/en-us/126347 advisory
https://support.apple.com/en-us/126352 advisory
https://support.apple.com/en-us/126348 advisory
https://support.apple.com/en-us/126349 advisory
https://support.apple.com/en-us/126351 advisory
https://support.apple.com/en-us/126350 advisory
https://support.apple.com/en-us/126354 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-20654 advisory

Open in Interactive Console →