Input Validation Flaw in Apple Products Allows Process Crash
CVE-2026-28917

Currently unrated

Key Information:

Vendor

Apple

Vendor
CVE Published:
11 May 2026

What is CVE-2026-28917?

An input validation vulnerability has been identified in various Apple products, which, when exploited through maliciously crafted web content, can lead to unexpected process crashes. Apple has addressed the issue in the latest versions of its operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Users are encouraged to update their devices promptly to mitigate any potential risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 18.7.9

iOS and iPadOS 0 < 26.5

macOS 0 < 26.5

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.