CVE-2026-65410

Apple OS Crash Vulnerability Allowing Untrusted Apps to Cause System Termination

Published Sep 14, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

Analysis

Technical impact

The vulnerability arises when an application can trigger unexpected system termination due to missing runtime checks in the operating system. Based on the description, it is inferred that the flaw allows a calling application to force a crash, which translates to a denial of service affecting device availability. The weakness aligns with the CWE-248 and CWE-400 designations for unexpected behavior and resource exhaustion, respectively.

Affected Systems

Apple's iOS, iPadOS, macOS, tvOS, visionOS, and watchOS are affected. Versions prior to iOS 26.7 or 27, iPadOS 26.7 or 27, macOS Golden Gate 27 or earlier, macOS Tahoe 26.7 or earlier, and tvOS, visionOS, watchOS version 27 or earlier are vulnerable. The flaw is fixed in the listed releases of each operating system.

Risk and Exploitability

The CVSS score of 7.5 indicates a high‑impact denial of service, while the EPSS score of less than 1 % shows that public exploitation is unlikely at this time and the flaw is not cataloged in the CISA KEV list. The description does not specify a remote attack surface; therefore, it is inferred that the most plausible vector is local or application‑based, meaning that any third‑party application with execution privileges could exploit the flaw to crash the device.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 26.7
`0`	affected	< 27

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 26.7
`0`	affected	< 27

Apple

tvOS

affected

Version	Status	Constraints
`0`	affected	< 27

Apple

visionOS

affected

Version	Status	Constraints
`0`	affected	< 27

Apple

watchOS

affected

Version	Status	Constraints
`0`	affected	< 27

Configuration 1 [-]

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

No data.

Vendor Product Versions

Apple

Ios And Ipados

Version	Status	Scheme	Platform
`[0,26.7)`	affected	generic	—
`[0,27)`	affected	generic	—

Apple

Macos

Version	Status	Scheme	Platform
`[0,26.7)`	affected	generic	—
`[0,27)`	affected	generic	—

Apple

Tvos

Version	Status	Scheme	Platform
`[0,27)`	affected	generic	—

Apple

Visionos

Version	Status	Scheme	Platform
`[0,27)`	affected	generic	—

Apple

Watchos

Version	Status	Scheme	Platform
`[0,27)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update all Apple operating system versions to the latest released releases (iOS 26.7/27 or newer, iPadOS 26.7/27 or newer, macOS Golden Gate 27 or newer, macOS Tahoe 26.7 or newer, tvOS 27, visionOS 27, watchOS 27).
If an upgrade cannot be performed immediately, restrict the installation or execution of non‑Apple‑signed applications to prevent exploitation of the flaw.
Monitor device logs for unexpected application crashes and apply subsequent security updates as they become available via System Settings.

Generated by OpenCVE AI on September 20, 2026 at 22:14 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.499% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149041
https://support.apple.com/en-us/149042

History

Sep 20, 2026 10:30 PM Title updated View changes

Type	Values Removed	Values Added
Title		Apple OS Crash Vulnerability Allowing Untrusted Apps to Cause System Termination

Sep 16, 2026 3:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple ipados Apple iphone Os
CPEs		cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:o:apple:visionos:::::::: cpe:2.3:o:apple:watchos::::::::
Vendors & Products		Apple ipados Apple iphone Os

Sep 16, 2026 2:30 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-248 CWE-400
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 16, 2026 1:15 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title	Malicious App Could Crash Apple Devices
Weaknesses	CWE-665 CWE-758

Sep 15, 2026 12:30 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Malicious App Could Crash Apple Devices
Weaknesses		CWE-665 CWE-758

Sep 15, 2026 1:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos
Vendors & Products		Apple Apple ios And Ipados Apple macos Apple tvos Apple visionos Apple watchos

Sep 14, 2026 9:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
References		https://support.apple.com/en-us/149034 https://support.apple.com/en-us/149035 https://support.apple.com/en-us/149036 https://support.apple.com/en-us/149037 https://support.apple.com/en-us/149038 https://support.apple.com/en-us/149041 https://support.apple.com/en-us/149042