Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

iOS, iPadOS, macOS: Malicious Input Can Crash Devices

CVE-2026-28894
Summary

Certain iOS, iPadOS, and macOS versions have a security fix that prevents a malicious attacker from crashing your device by sending it bad input. This could cause your device to shut down or become unresponsive. The issue is fixed in the latest versions of iOS, iPadOS, and macOS.

Original title
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A remote attack...
Original description
A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. A remote attacker may be able to cause a denial-of-service.
Published: 25 Mar 2026 · Updated: 25 Mar 2026 · First seen: 25 Mar 2026