Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A type confusion issue was addressed with improved memory handling. This issue may lead to unexpected app termination. The vulnerability affects multiple Apple operating systems, including iOS and macOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-28822 |
Exploitation
An attacker can exploit this vulnerability by executing a specially crafted application that triggers the type confusion issue. This can lead to unexpected behavior, including app crashes, potentially allowing the attacker to disrupt services or gain unauthorized access to system resources.
Affected Products
- iOS 26.4 – Affected by type confusion leading to app termination.
- iPadOS 26.4 – Similar vulnerabilities as iOS, causing potential app crashes.
- macOS Sequoia 15.7.5 – Vulnerable to the same type confusion issues.
- macOS Sonoma 14.8.5 – Affected by the type confusion vulnerability.
- macOS Tahoe 26.4 – Vulnerable to unexpected app termination.
- tvOS 26.4 – Affected by the type confusion issue.
- visionOS 26.4 – Vulnerable to app termination due to type confusion.
- watchOS 26.4 – Affected by the same type confusion issue.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Apple has released updates that address the type confusion issue and improve memory handling, which should be applied as soon as possible.