CVE-2026-28977
Received Received - Intake

Memory Corruption in Apple iOS and iPadOS

Publication date: 2026-05-11

Last updated on: 2026-05-11

Assigner: Apple Inc.

Description
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted file may lead to unexpected app termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-05-11
Last Modified
2026-05-11
Generated
2026-07-11
AI Q&A
2026-05-12
EPSS Evaluated
2026-07-10
NVD
CVE-2026-28977

Affected Vendors & Products

Showing 8 associated CPEs
Vendor Product Version / Range
apple ios 18.7.9
apple ipados 18.7.9
apple macos_sequoia 15.7.7
apple macos_sonoma 14.8.7
apple macos_tahoe 26.5
apple tvos 26.5
apple visionos 26.5
apple watchos 26.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper bounds checking in certain Apple operating systems. When a maliciously crafted file is processed, it may cause an unexpected termination of the application.

Compliance Impact

The vulnerability involves processing a maliciously crafted file that may lead to unexpected app termination. There is no information provided about data breaches, unauthorized data access, or exposure of personal or sensitive information.

Therefore, based on the provided information, there is no direct indication that this vulnerability impacts compliance with common standards and regulations such as GDPR or HIPAA.

Impact Analysis

The impact of this vulnerability is that processing a specially crafted file could cause an application to unexpectedly terminate, potentially disrupting normal use of the affected software.

Mitigation Strategies

To mitigate this vulnerability, update your Apple devices to the fixed versions of the operating systems as soon as possible.

  • Update iOS devices to iOS 18.7.9 or iOS 26.5.
  • Update iPadOS devices to iPadOS 18.7.9 or iPadOS 26.5.
  • Update macOS devices to macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, or macOS Tahoe 26.5.
  • Update Apple TV to tvOS 26.5.
  • Update visionOS devices to version 26.5.
  • Update Apple Watch devices to watchOS 26.5.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-28977. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart