Null Pointer Dereference in Apple iOS and macOS Products
CVE-2026-86964

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 26 October 2026

What is CVE-2026-86964?

An issue has been identified in various Apple operating systems involving a null pointer dereference, which may allow a malicious app to cause unexpected system termination. This vulnerability was addressed through enhanced input validation measures to bolster system stability and security.

Affected Version(s)

iOS and iPadOS 0 < 27

macOS 0 < 26.7.2

macOS 0 < 27

References

https://support.apple.com/en-us/149034

https://support.apple.com/en-us/149035

https://support.apple.com/en-us/149036

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 26, 2026
Vulnerability Reserved
Sep 8, 2026

CVE-2026-86964 Data

JSON