Null Pointer Dereference in Apple Products Affecting iOS and macOS
CVE-2026-28886
5.9MEDIUM
Key Information:
- Vendor
Apple
- Vendor
- CVE Published:
- 25 March 2026
What is CVE-2026-28886?
A vulnerability exists within Apple’s software platforms due to improper input validation leading to a null pointer dereference. This could allow an attacker in a privileged network position to exploit the issue, potentially causing a denial-of-service condition. Apple has addressed this vulnerability in multiple product updates, enhancing input validation processes to mitigate associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
iOS and iPadOS 0 < 18.7.7
iOS and iPadOS 0 < 26.4
macOS 0 < 14.8.5