Critical severity9.1NVD Advisory· Published Jun 29, 2026· Updated Aug 17, 2026

CVE-2026-39868

Description

This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Ipados2 versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.5.2
- (no CPE)range: 18.7.10
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <26.5.2
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: <26.5.2
Apple Inc./macOS Sequoiallm-fuzzy
Range: 15.7.8
Apple Inc./iOSllm-fuzzy
Range: 18.7.10

Patches

Vulnerability mechanics

References

support.apple.com/en-us/127594nvdVendor Advisory
support.apple.com/en-us/127595nvdVendor Advisory
support.apple.com/en-us/128068nvd
support.apple.com/en-us/128069nvd
support.apple.com/en-us/128070nvd
support.apple.com/en-us/128071nvd
support.apple.com/en-us/128072nvd
support.apple.com/en-us/148287nvd

News mentions

Apple Patches iOS and macOS, (Mon, Aug 17th)
SANS Internet Storm Center · Aug 17, 2026
Apple Patches Everything (July 2026), (Wed, Jul 29th)
SANS Internet Storm Center · Jul 29, 2026

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000