What is the CVSS score of EUVD-2026-78122?

EUVD-2026-78122 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Tvos are affected by EUVD-2026-78122?

Apple's built-in NFS client across iOS, iPadOS, macOS, tvOS, visionOS and watchOS contains a kernel memory-corruption flaw that can be triggered when a user connects to an attacker-controlled NFS…. A patch is available.

How to fix or mitigate EUVD-2026-78122?

Within 24 hours, confirm which managed assets have the NFS client enabled or users who routinely mount external shares, and validate that you can inventory OS versions across iOS/iPadOS, macOS, tvOS, visionOS and watchOS; if a formal change process allows, begin emergency patching of the highest-exposure macOS endpoints. Within 7 days, deploy the vendor fixes broadly: iOS 26.7/27, iPadOS 26.7/27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27, prioritizing devices used for engineering, media or other share-mounting workflows, and verify compliance through your MDM/EDR reporting. Within 30 days, complete remediation of remaining unpatched devices, restrict or remove unnecessary NFS share mounting through policy, and revalidate that no endpoints fall outside automated update enforcement.

Tvos EUVD-2026-78122

| CVE-2026-43686 HIGH

Use After Free (CWE-416)

2026-09-14 apple

GHSA-wx7g-gmcw-pmcw

Buffer Overflow Use After Free Memory Corruption Apple Tvos Visionos Watchos Ios And Ipados

8.8

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (apple) · only source for this CVE.

CVSS VectorVendor: apple

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 17:36 vuln.today

CVSS changed

Sep 15, 2026 - 15:22 NVD

8.8 (HIGH)

Patch available

Sep 14, 2026 - 22:19 EUVD

CVE Published

Sep 14, 2026 - 20:51 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 14, 2026 - 20:51 cve.org

HIGH 8.8

DescriptionCVE.org

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

AnalysisAI

Kernel-level use-after-free in Apple's built-in NFS client allows memory corruption when a device connects to an attacker-operated NFS server, affecting iOS/iPadOS, macOS, tvOS, visionOS and watchOS. Exploitation requires the victim to mount or connect to a malicious NFS share (UI:R) but no credentials or privileges on the target device, making this a remote, unauthenticated-against-the-client attack that terminates in kernel memory corruption with high confidentiality, integrity and availability impact. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, confirm which managed assets have the NFS client enabled or users who routinely mount external shares, and validate that you can inventory OS versions across iOS/iPadOS, macOS, tvOS, visionOS and watchOS; if a formal change process allows, begin emergency patching of the highest-exposure macOS endpoints. …

Threat intelligence, references, and detailed analysis are available after sign-in.