Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A type confusion issue was addressed with improved checks. A remote attacker may be able to cause a denial of service. This issue affects multiple Apple operating systems and has been fixed in the latest versions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28983 |
Exploitation
To exploit this vulnerability, an attacker would need to send specially crafted network packets to the affected devices. If successful, this could lead to a denial of service, impacting the availability of the device. The low attack complexity means that the exploit can be executed without requiring significant resources or advanced skills.
Affected Products
- iOS 18.7.9 and later: Affected by type confusion leading to potential denial of service.
- iPadOS 18.7.9 and later: Similar vulnerability as iOS, allowing remote denial of service.
- macOS Tahoe 26.5 and later: Vulnerable to the same type confusion issue.
- tvOS 26.5 and later: Affected by the denial of service vulnerability.
- visionOS 26.5 and later: Vulnerable to the same type confusion issue.
- watchOS 26.5 and later: Affected by the denial of service vulnerability.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying security updates is crucial to protect against potential exploits and ensure device integrity.