CVE-2026-28986

High

Published: 11/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A race condition was addressed with additional validation in iOS, iPadOS, macOS, tvOS, and watchOS. This issue is fixed in versions 18.7.9 and 26.5 for iOS and iPadOS, as well as in the corresponding versions for macOS, tvOS, and watchOS.

Risk Assessment

An app may be able to cause unexpected system termination, potentially leading to data loss or service disruption.

Recommendation

It is recommended to update systems to the latest versions to minimize the risk associated with this vulnerability.

Other vulnerabilities in iOS, iPadOS, macOS, tvOS, watchOS

See all

CVE-2026-28987High
A logging issue was addressed with improved data redaction. An app may be able to leak sensitive kernel state.
CVE-2026-28943High
A logging issue was addressed with improved data redaction. An app may be able to determine kernel memory layout.

Original NVD description (English source)

A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.