Product:
iOS and iPadOS
Summary
A denial-of-service issue was addressed with improved input validation. An attacker in a privileged network position may be able to cause a denial-of-service. This issue is fixed in the latest versions of iOS and iPadOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2026-28967 |
Exploitation
To exploit this vulnerability, an attacker must be in a privileged network position. By sending specially crafted input to the affected devices, the attacker can trigger the denial-of-service condition, leading to service disruption for users.
Affected Products
- iOS 18.7.7 – Fixed denial-of-service issue with improved input validation.
- iPadOS 18.7.7 – Addressed the same denial-of-service vulnerability.
- iOS 26.4 – Updated to resolve the denial-of-service issue.
- iPadOS 26.4 – Mitigated the denial-of-service vulnerability.
Mitigation
Users are advised to update their devices to the latest versions of iOS and iPadOS to mitigate the denial-of-service vulnerability. Regularly applying updates can help protect against such security issues.