CVE-2026-28986: Buffer Overflow
Published May 11, 2026
·Updated
A race condition was addressed with additional validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.
Other sources
Accelerate. An out-of-bounds read was addressed with improved bounds checking.
— Apple
Accounts. A permissions issue was addressed with additional restrictions.
— Apple
Accounts. An authorization issue was addressed with improved state management.
— Apple
APFS. A buffer overflow was addressed with improved bounds checking.
— Apple
App Intents. A logic issue was addressed with improved restrictions.
— Apple
Credit
Vaagn Vardanian, Nathaniel Oh@@calysteon, beist, Yiğit Can YILMAZ@@yilmazcanyigit, popku1337(STAR Labs SG Pte), Billy Jheng Bing Jhong(STAR Labs SG Pte), Pan Zhenpeng@@Peterpan0927(STAR Labs SG Pte), Robert Tran, Aswin kumar Gokulakannan, Calif.io in collaboration with Claude, Anthropic Research, Csaba Fitzl@@theevilbit(Iru), Ryan Hileman via Xint Code (xint.io), Chris Betz(Talence Security), Tristan Madani@@TristanInSec(Talence Security), Dhiyanesh Selvaraj@@redroot97, Ruslan Dautov, Atul R V, Omar Cerrito, Anton Pakhunov, Ricardo Prado, Ian van der Wurff (ian.nl), Michael DePlante@@izobashi(TrendAI Zero Day Initiative), Dan Raviv, Ilya Sc. Jowell A., Peter Malone, Asaf Cohen, Doron Assness, Peter Malone(Supernetworks), Dave G.(Supernetworks), Alex Radocea(Supernetworks), Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), Andy Koo@@andykoo(Hexens), Alex Radocea, Amy (amys.website), Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), YingQi Shi@@Mas0nShi(DBAppSecurity's WeBin lab), an anonymous researcher, David Ige - Beryllium Security, Cantina, Luke Francis, kwak kiyong / kakaogames, Vitaly Simonovich, Adel Bouachraoui, greenbynox, Do Young Park, Yuhao Hu, Yuanming Lai, Chenggang Wu, Zhe Wang, DARKNAVY@@DarkNavyOrg(TrendAI Zero Day Initiative), Anonymous(TrendAI Zero Day Initiative), Daniel Rhea, Luka Rački, wac(TrendAI Zero Day Initiative), Kookhwan Lee(TrendAI Zero Day Initiative), Mateusz Krzywicki (iVerify.io), Maher Azzouzi, Aisle offensive security research team (Joshua Rogers(Calif), Luigino Camastra(Calif), Igor Morgenstern(Calif), (Calif), Guido Vranken)(Calif), Maher Azzouzi(Calif), Ngan Nguyen(Calif), dr3dd, Gia Bui@@yabeow(Calif), w0wbox, Milad Nasr, Nicholas Carlini with Claude, Anthropic, Khiem Tran, Kenneth Hsu(Palo Alto Networks), Jérôme DJOUDER, Wang Yu, Brendon Tiszka(Google Project Zero), Jorge Welch, Adriatik Raci, Abhay Kailasia@@abhay_kailasia(Safran Mumbai India), Dave G., impost0r (ret2plt), David Ige(Beryllium Security), Arni Hardarson, Kun Peeks@@SwayZGl1tZyyy, Aswin Kumar Gokula Kannan, Suresh Sundaram, Jiri Ha, wdszzml, Atuin Automated Vulnerability Discovery Engine, Johnny Franks@@zeroxjf, Google Threat Analysis Group, Mihalis Haatainen, Ari Hawking, Ashish Kunwar, Robert Tran(STAR Labs SG Pte), Chris Betz, Morris Richman@@morrisinlife, Andrei Dodu, Zhongcheng Li(IES Red Team), Rosyna Keller(Totally Not Malicious Software), Vamshi Paili, Tony Gorez for Reverse Society@@tonygo_, Alvin Aries Tapia, XiguaSec, Ilya Andr (andrd3v)(Voynich Group), Ilias Morad (A2nkF)(Voynich Group), Duy Trần@@khanhduytran0, @@hugeBlack, Guy Dor, Daniel Rhea(TrendAI Zero Day Initiative), CVE-2026-1837, Alan Wang, Christopher W. Fletcher, Hovav Shacham, David Kohlbrenner, Riccardo Paccagnella, Niels Hofmans(TrendAI Zero Day Initiative), Somair Ansar, Seiji Sakurai@@HeapSmasher
Affected Software
18 affected componentsFixes available
Apple macOS Tahoe<26.5
26.5
Apple iOS<26.5
26.5
Apple iPadOS<26.5
26.5
Apple macOS Sonoma<14.8.7
14.8.7
Apple macOS Sequoia<15.7.7
15.7.7
Apple tvOS<26.5
26.5
Apple WatchOS<26.5
26.5
Apple iOS<18.7.9
18.7.9
Apple iPadOS<18.7.9
18.7.9
Apple iPadOS<18.7.9
Apple iPadOS>=26.0<26.5
Apple iPhone OS<18.7.9
Apple iPhone OS>=26.0<26.5
Apple macOS>=14.0<14.8.7
Apple macOS>=15.0<15.7.7
Apple macOS>=26.0<26.5
Apple tvOS<26.5
Apple WatchOS<26.5
Event History
May 11, 2026
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
Affected Software
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·08:07 PM
Data Sourced
via MITRE·08:07 PM
DescriptionWeakness
Data Sourced
via NVD·09:18 PM
DescriptionSeverityWeaknessAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-28991
- CVE-2026-28988
- CVE-2026-28959
- CVE-2026-28995
- CVE-2026-1837
- CVE-2026-28956
- CVE-2026-39869
- CVE-2026-28922
- CVE-2026-28936
- CVE-2026-28918
- CVE-2026-28915
- CVE-2026-43659
- CVE-2026-28923
- CVE-2026-28925
- CVE-2026-43661
- CVE-2026-28977
- CVE-2026-28990
- CVE-2026-28978
- CVE-2026-28992
- CVE-2026-28943
- CVE-2026-28969
- CVE-2026-43655
- CVE-2026-43654
- CVE-2026-28908
- CVE-2026-28954
- CVE-2026-28897
- CVE-2026-28952
- CVE-2026-28951
- CVE-2026-28972
- CVE-2026-28986
- CVE-2026-28987
- CVE-2026-28983
- CVE-2026-28929
- CVE-2026-43653
- CVE-2026-28985
- CVE-2026-43668
- CVE-2026-43666
- CVE-2026-28941
- CVE-2026-28940
- CVE-2026-28961
- CVE-2026-28906
- CVE-2026-43656
- CVE-2026-43652
- CVE-2026-39870
- CVE-2026-28846
- CVE-2026-28993
- CVE-2026-28848
- CVE-2026-28930
- CVE-2026-28974
- CVE-2026-28996
- CVE-2026-28919
- CVE-2026-28924
- CVE-2026-39871
- CVE-2026-28976
- CVE-2026-43660
- CVE-2026-28907
- CVE-2026-28962
- CVE-2026-43658
- CVE-2026-28905
- CVE-2026-28847
- CVE-2026-28904
- CVE-2026-28955
- CVE-2026-28903
- CVE-2026-28953
- CVE-2026-28902
- CVE-2026-28901
- CVE-2026-28913
- CVE-2026-28883
- CVE-2026-28958
- CVE-2026-28917
- CVE-2026-28947
- CVE-2026-28946
- CVE-2026-28942
- CVE-2026-28971
- CVE-2026-28944
- CVE-2026-28819
- CVE-2026-28994
- CVE-2026-28914
- CVE-2026-28920
- CVE-2026-28964
- CVE-2026-28963
- CVE-2026-28957
- CVE-2026-28965
- CVE-2025-43524
- CVE-2026-28840
- CVE-2026-28878
- CVE-2026-28877
- CVE-2026-28872
- CVE-2026-28894
- CVE-2026-28870
- CVE-2026-28882
- CVE-2026-28873
Frequently Asked Questions
1
What is the severity of CVE-2026-28986?
CVE-2026-28986 is considered a critical vulnerability due to the risk of system termination.
2
How do I fix CVE-2026-28986?
To fix CVE-2026-28986, upgrade your system to iOS 18.7.9 or iPadOS 18.7.9, or to the respective latest versions of macOS and tvOS.
3
What platforms are affected by CVE-2026-28986?
CVE-2026-28986 affects macOS Tahoe, iOS, iPadOS, macOS Sonoma, macOS Sequoia, tvOS, and watchOS.
4
What causes CVE-2026-28986?
CVE-2026-28986 is caused by a race condition that allows an app to initiate unexpected system termination.
5
Are there any known exploits for CVE-2026-28986?
As of now, there are no public reports of exploits specifically targeting CVE-2026-28986.