Critical severity9.1NVD Advisory· Published Jun 29, 2026· Updated Jul 27, 2026

CVE-2026-39868

Description

This issue was addressed with improved input validation. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected products

Apple Inc./Ipados2 versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.5.2
- (no CPE)range: before 26.5.2
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <26.5.2
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: <26.5.2
Apple Inc./tvOSllm-fuzzy
Range: before 26.6
Apple Inc./watchOSllm-fuzzy
Range: before 26.6
Apple Inc./Visionosllm-fuzzy
Range: before 26.6
Apple Inc./macOS Sequoiallm-fuzzy
Range: before 15.7.8
Apple Inc./macOS Sonomallm-fuzzy
Range: before 14.8.8
Apple Inc./macOS Tahoellm-fuzzy
Range: before 26.5.2
Apple Inc./iOSllm-fuzzy
Range: before 26.5.2

Patches

Vulnerability mechanics

References

support.apple.com/en-us/127594nvdVendor Advisory
support.apple.com/en-us/127595nvdVendor Advisory
support.apple.com/en-us/128068nvd
support.apple.com/en-us/128069nvd
support.apple.com/en-us/128070nvd
support.apple.com/en-us/128071nvd
support.apple.com/en-us/128072nvd

News mentions

Apple Patches Everything (July 2026), (Wed, Jul 29th)
SANS Internet Storm Center · Jul 29, 2026

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000