CVE-2026-86913: Use After Free
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
iOS/iPadOSto a version that resolves this vulnerability.Fixed in 26.7 - Upgrade
Upgrade
iOS/iPadOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Golden Gateto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
macOS Sequoiato a version that resolves this vulnerability.Fixed in 15.8 - Upgrade
Upgrade
macOS Tahoeto a version that resolves this vulnerability.Fixed in 26.7 - Upgrade
Upgrade
tvOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
visionOSto a version that resolves this vulnerability.Fixed in 27 - Upgrade
Upgrade
watchOSto a version that resolves this vulnerability.Fixed in 27
Event History
Frequently Asked Questions
What does an attacker need to do to trigger this issue?
An attacker would need to cause the affected device to process a maliciously crafted media file. The available information does not specify a delivery method or whether user interaction is required.
Which systems should be prioritized for updates?
Systems running affected Apple operating systems should be updated to the listed fixed releases: iOS and iPadOS 26.7 or 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
What is the known impact if exploitation succeeds?
Processing the crafted media file may cause an affected application to terminate unexpectedly or corrupt memory in the process handling the file. The provided information does not state whether code execution or privilege escalation is possible.