Executive brief
A memory management vulnerability in Apple operating systems could allow a malicious application to crash the device or gain unauthorized access to sensitive system memory. This affects iPhones, iPads, Macs, and other Apple devices, potentially leading to a complete system compromise or data theft by a rogue app. Users should update to version 26.6 of their respective operating systems to resolve the issue.
Technical details
A use-after-free (UAF) vulnerability exists in the kernel memory management of multiple Apple operating systems. A local malicious application can exploit this flaw to trigger an unexpected system termination (denial of service) or achieve arbitrary kernel memory writes. The issue was addressed through improved memory management techniques. Affected platforms include iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS, all prior to version 26.6.
Affected products
- Apple iOS and iPadOS Before 26.6
- Apple macOS Tahoe Before 26.6
- Apple tvOS Before 26.6
- Apple visionOS Before 26.6
- Apple watchOS Before 26.6
Timeline
- 2026-07-27: disclosed
- 2026-07-27: patched