Executive brief
A type confusion vulnerability in iOS and related Apple operating systems allows an app to cause unexpected termination of system processes. While the immediate impact is a denial of service through app crashes, type confusion issues can potentially be leveraged for more severe attacks. The vulnerability affects iPhone, iPad, Mac, Apple Watch, Apple TV, and Vision Pro devices running older OS versions.
Technical details
This vulnerability is a type confusion issue that was addressed through improved memory handling in the affected components. Type confusion occurs when memory is interpreted as a different data type than intended, potentially leading to unexpected behavior. The issue allows a malicious or poorly-written app to cause unexpected system termination. The vulnerability is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. Users should update to these patched versions to remediate the issue.
Affected products
- Apple iOS before 26.7 and before 27
- Apple iPadOS before 26.7 and before 27
- Apple macOS Golden Gate before 27
- Apple macOS Sequoia before 15.8
- Apple macOS Tahoe before 26.7
- Apple tvOS before 27
- Apple visionOS before 27
- Apple watchOS before 27
Timeline
- 2026-09-14: disclosed
- 2026-09-14: patched