Product:
iOS, iPadOS, macOS, visionOS
Summary
The issue was addressed with improved checks. Processing a maliciously crafted file may lead to unexpected app termination. This vulnerability affects multiple Apple operating systems and requires user interaction to exploit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28936 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious file and delivering it to the target system over a network. Once the file is processed by the affected application, it may lead to unexpected termination, allowing the attacker to disrupt services or potentially execute further attacks.
Affected Products
- iOS 18.7.9 – Affected by the vulnerability leading to unexpected app termination.
- iPadOS 18.7.9 – Similar impact as iOS, with potential for app crashes.
- macOS Sonoma 14.8.7 – Vulnerable to the same issue, affecting application stability.
- macOS Tahoe 26.5 – Also impacted, leading to potential service disruptions.
- visionOS 26.5 – Affected by the vulnerability, risking app termination.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, and visionOS as specified in the security updates. Regularly applying updates can help protect against known vulnerabilities.