CVE catalog

CVE-2026-28941

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Tahoe 26.5. Processing a maliciously crafted file may lead to a denial-of

[CVE catalog]

Severity
High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.46% · Oct 25, 2026

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Tahoe 26.5. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpeipadosNot reported18.7.9fixed
Cpeiphone_osNot reported18.7.9fixed
CpemacosNot reported15.7.7fixed
CpemacosNot reported26.5fixed
CpeipadosNot reported18.7.9fixed
Cpeiphone_osNot reported18.7.9fixed
CpemacosNot reported26.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpeipadoscpeNot reported18.7.9Not reportedNot reportedNot reported
Cpeiphone_oscpeNot reported18.7.9Not reportedNot reportedNot reported
CpemacoscpeNot reported15.7.7Not reportedNot reportedNot reported
CpemacoscpeNot reported26.5Not reportedNot reportedNot reported
CpeipadoscpeNot reported18.7.9Not reportedNVD-CVE-2026-28941Not reported
Cpeiphone_oscpeNot reported18.7.9Not reportedNVD-CVE-2026-28941Not reported
CpemacoscpeNot reported26.5Not reportedNVD-CVE-2026-28941Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]