Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A stack overflow was addressed with improved input validation. This issue may allow an app to cause a denial-of-service. The vulnerability affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28852 |
Exploitation
An attacker could exploit this vulnerability by crafting a malicious application that, when executed, triggers the stack overflow due to improper input validation. This could lead to a denial-of-service condition, impacting the availability of the affected system.
Affected Products
- iOS 18.7.7 and earlier
- iPadOS 18.7.7 and earlier
- macOS Sequoia 15.7.5 and earlier
- macOS Tahoe 26.4 and earlier
- tvOS 26.4 and earlier
- visionOS 26.4 and earlier
- watchOS 26.4 and earlier
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Regularly applying updates can help protect against potential exploits.