Product:
iOS
Summary
A null pointer dereference was addressed with improved input validation. This issue may allow a user in a privileged network position to cause a denial-of-service. The vulnerability has been fixed in several Apple operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.9 | CVE-2026-28886 |
Exploitation
To exploit this vulnerability, an attacker must be in a privileged network position. By sending specially crafted network packets, the attacker can trigger the null pointer dereference, leading to a denial-of-service condition on the affected devices.
Affected Products
- iOS 18.7.7 – Fixed the null pointer dereference issue.
- iPadOS 18.7.7 – Addressed the vulnerability with improved input validation.
- macOS Sequoia 15.7.5 – Mitigated the risk of denial-of-service.
- macOS Sonoma 14.8.5 – Resolved the null pointer dereference vulnerability.
- macOS Tahoe 26.4 – Improved input validation to prevent exploitation.
- tvOS 26.4 – Addressed the issue to enhance system stability.
- visionOS 26.4 – Fixed the vulnerability to prevent denial-of-service.
- watchOS 26.4 – Mitigated the risk associated with the null pointer dereference.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying security updates is essential to protect against potential exploits.