HIGH Published October 26, 2026

CVE-2026-86992

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination.

CVSS base score

7.5 (v3.1)

Severity

HIGH

Attack vector

Network

Weakness

CWE-119

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

apple ipados apple iphone os apple macos apple tvos apple visionos apple watchos

References

support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory
support.apple.com Release Notes, Vendor Advisory

View full NVD advisory →

More apple vulnerabilities

Published the same day

← Back to CVE watch

CVE-2026-86992

Affected products

References

More apple vulnerabilities

Published the same day

Related reading