Apple Patches Zero-Day Memory Corruption Flaw Exploited in the Wild

Apple has patched a critical zero-day vulnerability, CVE-2026-20700, that was actively exploited in the wild before its disclosure. This high-severity flaw, with a CVSS score of 7.8, affects multiple Apple products, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The vulnerability, categorized under CWE-119, involves a memory corruption issue that could allow attackers with memory write capabilities to execute arbitrary code on affected devices. The flaw was added to the Known Exploited Vulnerabilities (KEV) catalog on February 12, 2026, just a day after its public disclosure. This rapid inclusion underscores the urgency with which organizations should address the vulnerability. The exploitation of this zero-day was sophisticated, targeting specific users and systems, which suggests a high level of attacker expertise and intent. Apple has released updates to address this issue in iOS 26.3, iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, and watchOS 26.3. The patch involves improved state management to mitigate the risk of memory corruption. Users and administrators are strongly advised to apply these updates immediately to protect against potential exploitation. The exploitation of CVE-2026-20700 highlights the persistent threat posed by zero-day vulnerabilities, especially in widely used platforms like Apple's operating systems. The fact that this vulnerability was exploited before its disclosure emphasizes the need for robust security measures and timely patch management. Security teams should prioritize the deployment of these patches across all affected Apple devices. Additionally, monitoring for any signs of compromise related to this vulnerability should be intensified. Given the targeted nature of the attacks exploiting this flaw, organizations should also review their security posture and incident response plans to ensure they can quickly detect and respond to similar threats in the future.