Memory Corruption Issue in Apple iOS, iPadOS, macOS, tvOS, and visionOS
CVE-2026-28940

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 11 May 2026

What is CVE-2026-28940?

A memory corruption vulnerability exists in certain Apple operating systems that could be exploited through maliciously crafted images. This flaw affects various versions of iOS, iPadOS, macOS, tvOS, and visionOS, allowing an adversary to manipulate process memory. Apple has implemented improvements in memory handling to address this security issue in the latest versions of its software.

Affected Version(s)

iOS and iPadOS 0 < 18.7.9

iOS and iPadOS 0 < 26.5

macOS 0 < 15.7.7

References

https://support.apple.com/en-us/127110

https://support.apple.com/en-us/127111

https://support.apple.com/en-us/127115

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 11, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28940 Data

JSON