Unexpected App Termination in Apple iOS and macOS due to Malicious File Processing
CVE-2026-28936

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 11 May 2026

What is CVE-2026-28936?

A vulnerability exists in Apple's iOS and macOS that allows processing of a maliciously crafted file, potentially leading to unexpected app termination. This issue has been resolved in recent updates, including iOS 18.7.9, iPadOS 18.7.9, macOS Sonoma 14.8.7, and others. Users should ensure they are on the latest version to protect against this risk.

Affected Version(s)

iOS and iPadOS 0 < 18.7.9

iOS and iPadOS 0 < 26.5

macOS 0 < 14.8.7

References

https://support.apple.com/en-us/127110

https://support.apple.com/en-us/127111

https://support.apple.com/en-us/127115

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 11, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28936 Data

JSON