Product:
iOS, iPadOS, macOS, tvOS, watchOS
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. This issue is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28913 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected systems, can lead to a crash of the process. This can be done remotely over a network, requiring no user interaction or special privileges.
Affected Products
- iOS: Affected by the memory handling issue, leading to potential crashes when processing malicious web content.
- iPadOS: Similar vulnerabilities as iOS, with the same impact on process stability.
- macOS Tahoe: Vulnerable to crashes from malicious web content processing.
- tvOS: Affected by the same memory handling issue, leading to unexpected crashes.
- watchOS: Vulnerable to crashes when handling crafted web content.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, tvOS, and watchOS. Keeping software up to date is crucial in protecting against known vulnerabilities.