Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A memory corruption vulnerability was addressed with improved locking. An attacker may be able to cause unexpected app termination. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.7 | CVE-2026-28992 |
Exploitation
To exploit this vulnerability, an attacker would need local access to the affected device. By leveraging the memory corruption flaw, the attacker could potentially manipulate the app’s execution flow, leading to unexpected termination of the application. This requires a high level of complexity and specific conditions to be met.
Affected Products
- iOS 18.7.9 and earlier
- iPadOS 18.7.9 and earlier
- macOS Sequoia 15.7.7 and earlier
- macOS Sonoma 14.8.7 and earlier
- macOS Tahoe 26.5 and earlier
- tvOS 26.5 and earlier
- visionOS 26.5 and earlier
- watchOS 26.5 and earlier
Mitigation
To mitigate this vulnerability, users are advised to update their devices to the latest versions of the affected operating systems. Regularly applying security updates can help protect against potential exploitation of this and other vulnerabilities.