Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

CVE-2026-28969: Apple devices may unexpectedly crash

CVE-2026-28969 · published 5 months ago
Summary

A flaw in the memory handling of several Apple operating systems can let a malicious app cause the system to shut down unexpectedly. This affects iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Updating to the latest releases for each platform resolves the issue.

What to do
  • Update apple ios and ipados to version 18.7.9 or later.
  • Update apple tvos to version 26.5 or later.
  • Update apple visionos to version 26.5 or later.
  • Update apple watchos to version 26.5 or later.
Affected software
VendorProductAffected versions
apple ios and ipados < 18.7.9
apple macos < 14.8.7
>= 14.0, < 14.8.7
>= 15.0, < 15.7.7
>= 26.0, < 26.5
apple ipados < 18.7.9
>= 26.0, < 26.5
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
apple iphone_os < 18.7.9
>= 26.0, < 26.5
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple tvos < 26.5
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
apple visionos < 26.5
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
apple watchos < 26.5
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Original advisory text
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macO...
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Tahoe 26.7, tvOS 26.5, tvOS 27, visionOS 26.5, visionOS 27, watchOS 26.5, watchOS 27. An app may be able to cause unexpected system termination.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published11 May 2026
Updated4 Nov 2026
First seen11 May 2026
Sources
CVE-2026-28969 · MITRE
Track software like this
Free during beta