CVE-2026-28941

7.1 high SSVC exploitation: none Analyzed

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Tahoe 26.5. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

Fix

Patch, vendor advisory and mitigation references on NVD 3

https://support.apple.com/en-us/127111 Release Notes, Vendor Advisory
https://support.apple.com/en-us/127115 Release Notes, Vendor Advisory
https://support.apple.com/en-us/127116 Release Notes, Vendor Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

2026-10-26 18:32First seenCVSS 7.1 · appleNVD modified 2026-10-26 18:10

Affected (CPE criteria) 3

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

References 3

https://support.apple.com/en-us/127111 Release Notes, Vendor Advisory
https://support.apple.com/en-us/127115 Release Notes, Vendor Advisory
https://support.apple.com/en-us/127116 Release Notes, Vendor Advisory