CVE-2026-86944: Apple iOS vulnerability
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iOS 26.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iPadOS 26.7 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Sequoia 15.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Tahoe 26.7
Event History
Frequently Asked Questions
What level of access does an attacker need to trigger this issue?
The issue may be triggered by an app. The available information does not state whether the app must be installed by the user, whether it requires particular permissions, or whether remote delivery is possible.
What is the known impact?
A malicious or affected app may cause unexpected system termination. The provided information does not describe data disclosure, privilege escalation, or code execution.
Which software releases contain the fix?
The issue is fixed in iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, and macOS Tahoe 26.7.