Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. This vulnerability affects multiple Apple operating systems and requires user interaction to exploit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28903 |
Exploitation
An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web page. Once the user interacts with the malicious content, it may trigger the memory handling issue, leading to a crash of the affected process. This requires the attacker to have the ability to deliver the malicious content to the user.
Affected Products
- iOS 18.7.9 and later: Affected by memory handling issues that can lead to crashes.
- iPadOS 18.7.9 and later: Similar vulnerabilities as iOS affecting iPad devices.
- macOS Tahoe 26.5 and later: Vulnerable to the same memory handling issues.
- tvOS 26.5 and later: Affected by the same web content processing vulnerabilities.
- visionOS 26.5 and later: Vulnerable to crashes due to memory handling issues.
- watchOS 26.5 and later: Also affected by the same vulnerabilities.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Apple has released updates that address the memory handling issues, and applying these updates will help protect against potential exploitation.