Dashboard / CVE-2026-28819

CVE-2026-28819

MEDIUM
MEDIUM Priority: 0.35 BB Relevance: 62/100
Published: 2026-05-11 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: Low
I: Low
A: None

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to execute arbitrary code with kernel privileges.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
apple ipados < 18.7.9
apple iphone_os < 18.7.9
apple macos 14.0 – 14.8.7
apple macos 15.0 – 15.7.7
apple macos 26.0 – 26.5

References & Advisories (4)

https://support.apple.com/en-us/127111
Release Notes Vendor Advisory
https://support.apple.com/en-us/127115
Release Notes Vendor Advisory
https://support.apple.com/en-us/127116
Release Notes Vendor Advisory
https://support.apple.com/en-us/127117
Release Notes Vendor Advisory

Bug Bounty Relevance

62 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

5.4 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS — Exploitation Probability

6.50%
Raw Score 0.064980
Percentile 93.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.06498
2026-10-28
0.06498

Intelligence Sources

nvd ref →

External Links