Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A use-after-free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28879 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected Apple operating systems, can trigger a use-after-free condition. This may lead to an unexpected crash of the process, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- iOS 18.7.7
- iPadOS 18.7.7
- macOS Sequoia 15.7.5
- macOS Sonoma 14.8.5
- macOS Tahoe 26.4
- tvOS 26.4
- visionOS 26.4
- watchOS 26.4
Mitigation
Users are advised to update their devices to the latest versions of the affected operating systems to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits.