CVE-2026-20700: Apple Multiple Buffer Overflow Vulnerability

Source: Dev.to

CVE ID

CVE-2026-20700

Project

Apple

Product

Multiple Apple products (iOS, macOS, tvOS, watchOS, visionOS)

Dates

• Date Added: 2026-02-12
• Due Date: 2026-03-05

Description

Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory‑write capability to execute arbitrary code.

Severity

Unknown

Mitigation

Apply mitigations per vendor instructions, follow applicable BOD 22‑01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

References

• Apple Security Update 126346
• Apple Security Update 126348
• Apple Security Update 126351
• Apple Security Update 126352
• Apple Security Update 126353
• NVD entry for CVE‑2026‑20700
• Common Vulnerabilities & Exposures (CVE) List