Type Confusion Vulnerability in Apple Software Products
CVE-2026-28822

6.2MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 25 March 2026

What is CVE-2026-28822?

A type confusion issue has been identified in various Apple operating systems, which may allow an attacker to exploit memory handling flaws. This can lead to unexpected app terminations, potentially causing disruptions in user operations. Apple has addressed this vulnerability in the latest updates for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, making it essential for users to update their software to enhance security and stability.

Affected Version(s)

iOS and iPadOS 0 < 26.4

macOS 0 < 14.8.5

macOS 0 < 15.7.5

References

https://support.apple.com/en-us/126792

https://support.apple.com/en-us/126794

https://support.apple.com/en-us/126795

CVSS V3.1

Score:

6.2

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28822 Data

JSON