CVE-2026-28984
Received Received - Intake

Memory Corruption in iOS and iPadOS Leads to Safari Crash

Vulnerability report for CVE-2026-28984, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: Apple Inc.

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
apple ios 18.7.10
apple ipad_os 18.7.10

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a memory handling issue in iOS and iPadOS that could be exploited by processing malicious web content. This may cause an unexpected crash of the Safari browser.

Detection Guidance

This vulnerability is specific to Safari and iOS/iPadOS systems. Detection involves checking for the installed versions of iOS/iPadOS and Safari. If your system is running iOS/iPadOS versions prior to 18.7.10 or Safari versions affected by the issue, it may be vulnerable. No specific commands are provided in the context to detect this vulnerability directly.

Impact Analysis

If exploited, this vulnerability could lead to Safari crashing when visiting a maliciously crafted website. This may disrupt normal browsing activities but does not indicate data theft or unauthorized access.

Compliance Impact

This vulnerability does not provide sufficient information to determine its impact on compliance with standards like GDPR or HIPAA. The issue involves unexpected Safari crashes due to maliciously crafted web content, but no details are given about data exposure, unauthorized access, or privacy implications that would affect such regulations.

Mitigation Strategies

Update iOS to version 18.7.10 or later and iPadOS to version 18.7.10 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-28984. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart