CVE-2026-28913
Received Received - Intake

Memory Corruption in iOS and macOS Tahoe via Malicious Web Content

Publication date: 2026-05-11

Last updated on: 2026-05-11

Assigner: Apple Inc.

Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-05-11
Last Modified
2026-05-11
Generated
2026-07-11
AI Q&A
2026-05-12
EPSS Evaluated
2026-07-10
NVD
CVE-2026-28913

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
apple ios 26.5
apple ipad_os 26.5
apple macos_tahoe 26.5
apple tv_os 26.5
apple watch_os 26.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper memory handling when processing maliciously crafted web content. If exploited, it may cause an unexpected process crash on affected Apple operating systems.

Impact Analysis

The impact of this vulnerability is that processing specially crafted web content could cause an unexpected crash of a process on your device. This could lead to denial of service or disruption of normal device operation.

Mitigation Strategies

The vulnerability is addressed by updating to the fixed versions of the affected operating systems.

  • Update iOS devices to iOS 26.5 or later.
  • Update iPadOS devices to iPadOS 26.5 or later.
  • Update macOS devices to macOS Tahoe 26.5 or later.
  • Update tvOS devices to tvOS 26.5 or later.
  • Update watchOS devices to watchOS 26.5 or later.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-28913. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart