Vulnerability details

CVE-2026-39877

Apple iOS and iPadOSApple macOSApple tvOSApple visionOSApple watchOS
CVSS 3.1
7.8High

Official description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

CVSS scores

ScoreVersionSourceVector
7.8High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Apple iOS and iPadOS v < 18.7.10 CVEProject cvelistV5 (CNA)
Apple iOS and iPadOS v < 26.5 CVEProject cvelistV5 (CNA)
Apple macOS v < 14.8.8 CVEProject cvelistV5 (CNA)
Apple macOS v < 15.7.8 CVEProject cvelistV5 (CNA)
Apple macOS v < 26.5 CVEProject cvelistV5 (CNA)
Apple tvOS v < 26.5 CVEProject cvelistV5 (CNA)
Apple visionOS v < 26.5 CVEProject cvelistV5 (CNA)
Apple watchOS v < 26.5 CVEProject cvelistV5 (CNA)

References and advisories

8
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-07-27
Last updated
2026-08-25
State
Published
Assigner (CNA)
apple

Exploit prediction (EPSS)

0.17%
Probability of exploitation in 30 days
6.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-119
    Improper Restriction of Operations within the Bounds of a Memory Buffer