CVE Catalog

CVE-2026-28928

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.42%

34th percentile - higher than 34% of all known CVEs

Summary

A use-after-free vulnerability in Apple systems. An app may cause unexpected system termination.

Risk Assessment

A malicious app can crash the system, potentially leading to data loss or service disruption.

Recommendation

Update systems to iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, or watchOS 26.6.

Original NVD description (English source)

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS