CVE-2026-28846
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
A buffer overflow was addressed with improved bounds checking. This issue is fixed in several versions of Apple operating systems.
Risk Assessment
A remote attacker may be able to cause unexpected app termination, potentially leading to data loss or service disruption.
Recommendation
It is recommended to update systems to the latest versions to mitigate the risk associated with this vulnerability.
Other vulnerabilities in iOS, iPadOS, macOS, tvOS, visionOS, watchOS
See all- CVE-2026-65350High
A use-after-free issue was addressed with improved memory management. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may cause unexpected system termination or corrupt kernel memory.
- CVE-2026-113950Medium
An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
- CVE-2026-112546Low risk· EPSS 12%
An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-112518Low risk· EPSS 13%
A signature validation issue in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed with improved checks. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
- CVE-2026-112501Low risk· EPSS 14%
A race condition was addressed with improved state handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and an app may be able to cause unexpected system termination.
- CVE-2026-112477Low risk· EPSS 14%
A race condition was addressed with improved locking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112476Low risk· EPSS 14%
An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-112474Low risk· EPSS 13%
A use-after-free issue was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.
- CVE-2026-112470Low risk· EPSS 14%
An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112446Low risk· EPSS 14%
This issue was addressed with additional entitlement checks. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27 and 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
Original NVD description (English source)
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. A remote attacker may be able to cause unexpected app termination.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS