Denial-of-Service in iOS and iPadOS

Publication date: 2026-05-11

Last updated on: 2026-05-11

Assigner: Apple Inc.

Description

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-11

Last Modified

2026-05-11

Generated

2026-07-11

AI Q&A

2026-05-12

EPSS Evaluated

2026-07-10

NVD

CVE-2026-28967

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ios	18.7.7
apple	ipados	18.7.7
apple	ios	26.4
apple	ipados	26.4

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a denial-of-service (DoS) issue that occurs due to insufficient input validation. An attacker who has a privileged position within the network can exploit this flaw to cause a denial-of-service condition on affected Apple iOS and iPadOS devices.

Impact Analysis

The impact of this vulnerability is that an attacker with privileged network access can cause a denial-of-service, potentially making the affected device unavailable or unresponsive.

Mitigation Strategies

To mitigate this vulnerability, update affected devices to iOS 18.7.7, iPadOS 18.7.7, iOS 26.4, or iPadOS 26.4 where the issue has been fixed.

Hi! I’m here to help you understand CVE-2026-28967. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70