Stack Overflow Vulnerability in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS
CVE-2026-28852

5.5MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 25 March 2026

What is CVE-2026-28852?

A stack overflow vulnerability has been identified in multiple Apple operating systems, potentially allowing an application to orchestrate a denial-of-service attack. This issue arose due to insufficient input validation, which has now been resolved in the latest patches. Users are advised to update their devices to the patched versions to mitigate potential risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 18.7.7

iOS and iPadOS 0 < 26.4

macOS 0 < 15.7.5

References

https://support.apple.com/en-us/126792

https://support.apple.com/en-us/126793

https://support.apple.com/en-us/126794

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28852 Data

JSON