CVE catalog

CVE-2026-28952

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able t

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.80% · Oct 25, 2026

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpeipadosNot reported18.7.9fixed
Cpeiphone_osNot reported18.7.9fixed
CpemacosNot reported14.8.7fixed
CpemacosNot reported15.7.7fixed
CpemacosNot reported26.5fixed
CpeipadosNot reported18.7.9fixed
Cpeiphone_osNot reported18.7.9fixed
CpemacosNot reported26.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpeipadoscpeNot reported18.7.9Not reportedNot reportedNot reported
Cpeiphone_oscpeNot reported18.7.9Not reportedNot reportedNot reported
CpemacoscpeNot reported14.8.7Not reportedNot reportedNot reported
CpemacoscpeNot reported15.7.7Not reportedNot reportedNot reported
CpemacoscpeNot reported26.5Not reportedNot reportedNot reported
CpeipadoscpeNot reported18.7.9Not reportedNVD-CVE-2026-28952Not reported
Cpeiphone_oscpeNot reported18.7.9Not reportedNVD-CVE-2026-28952Not reported
CpemacoscpeNot reported26.5Not reportedNVD-CVE-2026-28952Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]