Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
This issue was addressed with improved checks to prevent unauthorized actions. It is fixed in iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. An app may be able to cause a denial-of-service.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28974 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious application that takes advantage of the insufficient checks in the affected software. By sending specially crafted network requests, the attacker may be able to trigger a denial-of-service condition, impacting the availability of the application or device.
Affected Products
- iOS: Affected version includes 26.5, which may allow denial-of-service.
- iPadOS: Affected version includes 26.5, which may allow denial-of-service.
- macOS Sequoia: Affected version includes 15.7.7, which may allow denial-of-service.
- macOS Tahoe: Affected version includes 26.5, which may allow denial-of-service.
- tvOS: Affected version includes 26.5, which may allow denial-of-service.
- visionOS: Affected version includes 26.5, which may allow denial-of-service.
- watchOS: Affected version includes 26.5, which may allow denial-of-service.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected software, which include the necessary fixes to prevent unauthorized actions and denial-of-service conditions.