Memory Corruption Issue in Apple iOS, iPadOS, macOS, tvOS, and visionOS
CVE-2026-28940

8.8HIGH

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Visionos
Vendor
CVE Published:
11 May 2026

What is CVE-2026-28940?

A memory corruption vulnerability exists in certain Apple operating systems that could be exploited through maliciously crafted images. This flaw affects various versions of iOS, iPadOS, macOS, tvOS, and visionOS, allowing an adversary to manipulate process memory. Apple has implemented improvements in memory handling to address this security issue in the latest versions of its software.

Affected Version(s)

iOS and iPadOS 0 < 18.7.9

iOS and iPadOS 0 < 26.5

macOS 0 < 15.7.7

References

https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127111
https://support.apple.com/en-us/127115

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.