Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A use-after-free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash. This issue is fixed in the latest versions of the affected products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28883 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected systems, can trigger a use-after-free condition. This can lead to a crash of the process handling the content, potentially allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- iOS: Latest version addresses the vulnerability.
- iPadOS: Latest version addresses the vulnerability.
- macOS: Latest version addresses the vulnerability.
- tvOS: Latest version addresses the vulnerability.
- visionOS: Latest version addresses the vulnerability.
- watchOS: Latest version addresses the vulnerability.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Regularly applying updates will help protect against known vulnerabilities.