Executive brief
A vulnerability in Apple's operating systems, including iOS, macOS, and watchOS, could allow a malicious application to cause the device to crash or restart unexpectedly. This issue stems from how the system handles specific types of data input. While the primary impact is a disruption of service (system termination), it affects a wide range of Apple hardware. Users should update to the latest software versions to resolve the issue.
Technical details
An integer overflow vulnerability exists across multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, and watchOS). The flaw is triggered by insufficient input validation, which can be exploited by a locally installed application. Successful exploitation leads to unexpected system termination (denial of service). Apple has addressed this vulnerability by implementing improved input validation in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
Affected products
- Apple iOS and iPadOS Before 26.6
- Apple macOS Sequoia Before 15.7.8
- Apple macOS Sonoma Before 14.8.8
- Apple macOS Tahoe Before 26.6
- Apple tvOS Before 26.6
- Apple visionOS Before 26.6
- Apple watchOS Before 26.6
Timeline
- 2026-07-27: advisory
- 2026-07-27: disclosed
- 2026-07-27: patched