Product:
iOS, iPadOS, macOS
Summary
The issue was addressed with improved checks. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in iOS 18.7.9, iPadOS 18.7.9, macOS Sequoia 15.7.7, and macOS Tahoe 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-28941 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious file and convincing a user to open it. Once the file is processed, it may lead to a denial-of-service condition or potentially expose sensitive memory contents. User interaction is required for the exploit to be successful.
Affected Products
- iOS 18.7.9 – Fixed version addressing the vulnerability.
- iPadOS 18.7.9 – Fixed version addressing the vulnerability.
- macOS Sequoia 15.7.7 – Fixed version addressing the vulnerability.
- macOS Tahoe 26.5 – Fixed version addressing the vulnerability.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, and macOS as specified. Regularly applying updates can help protect against potential exploits and ensure the security of the system.