Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
The issue was addressed with improved input validation. Processing maliciously crafted web content may lead to an unexpected process crash. This vulnerability affects multiple Apple operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-28917 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected Apple operating systems, may cause the application to crash. User interaction is required, as the victim must visit a specially crafted website or open a malicious file.
Affected Products
- iOS 18.7.9 – Affected by input validation issues leading to potential crashes.
- iPadOS 18.7.9 – Similar vulnerabilities as iOS, affecting device stability.
- macOS Tahoe 26.5 – Vulnerable to crashes from malicious web content.
- tvOS 26.5 – May experience unexpected crashes due to this issue.
- visionOS 26.5 – Affected by the same input validation vulnerabilities.
- watchOS 26.5 – Vulnerable to crashes from crafted web content.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Apple has released updates that address the input validation issues, enhancing the security of their products.