CVE-2026-28940
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
The issue concerns improper memory handling that may lead to process memory corruption when processing a maliciously crafted image. It has been fixed in several versions of Apple operating systems.
Risk Assessment
Malicious images may cause application or system crashes, posing a risk of data loss or unauthorized access to the system.
Recommendation
It is recommended to update to the latest versions of iOS, iPadOS, macOS, tvOS, and visionOS to protect against this vulnerability.
Other vulnerabilities in iOS, iPadOS, macOS, tvOS, visionOS
See all- CVE-2026-112469Low risk· EPSS 13%
An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-65344High
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app termination.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing a maliciously crafted image may corrupt process memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS