Product:
iOS
Summary
A race condition was addressed with additional validation. This issue may allow an app to cause unexpected system termination. The problem has been fixed in several versions of iOS, iPadOS, macOS, tvOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28986 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that triggers the race condition, potentially leading to unexpected system behavior or termination. The attack requires the application to be executed on the target device, making it necessary for the user to install and run the app.
Affected Products
- iOS 18.7.9 and earlier
- iPadOS 18.7.9 and earlier
- macOS Sequoia 15.7.7 and earlier
- macOS Sonoma 14.8.7 and earlier
- macOS Tahoe 26.5 and earlier
- tvOS 26.5 and earlier
- watchOS 26.5 and earlier
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, and watchOS as soon as possible. Keeping software up to date is crucial for protecting against known vulnerabilities.