Product:
iOS, iPadOS, macOS, visionOS
Summary
The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected process crash. This issue is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28944 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected systems, can trigger a crash of the process. This can be done remotely over a network, requiring no user interaction or special privileges.
Affected Products
- iOS: Affected by memory handling issues leading to crashes when processing malicious web content.
- iPadOS: Similar vulnerabilities as iOS, with potential for unexpected process crashes.
- macOS Tahoe: Vulnerable to crashes from maliciously crafted web content.
- visionOS: Also affected by the same memory handling issues.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, and visionOS. Regularly applying updates can help protect against such vulnerabilities.