CVE-2026-28983
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
Type checking was improved in Apple systems. A remote attacker may be able to cause a denial of service.
Risk Assessment
The risk includes potential service disruption, which could affect system availability.
Recommendation
Update Apple devices to the latest versions: iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5.
Other vulnerabilities in Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS
See all- CVE-2026-64733Critical
Data protection was improved. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to fingerprint the user.
- CVE-2026-64729Critical
Memory management was improved for a use-after-free issue. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64700Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43822Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43810Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43807Critical
A buffer overflow was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a malicious accessory to cause unexpected app termination.
- CVE-2026-43803Critical
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a remote attacker to cause unexpected system termination.
- CVE-2026-43799Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43778Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43769Critical
An integer overflow was addressed with improved input validation. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
Original NVD description (English source)
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause a denial of service.