EUVD-2026-15165
GHSA-3gqw-qcrw-37vv
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A10:2025 - Mishandling of Exceptional Conditions
ASVS 5.0
V16 - Security Logging and Error Handling Null pointer safety, defensive checks
MITRE ATT&CK
1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The risk profile for this vulnerability presents a mixed signal analysis. While specific CVSS metrics are not publicly available, the attack vector requires privileged network positioning (suggesting network-based but not remotely accessible from the internet without positioning), and the technical impact is limited to denial-of-service rather than data compromise or code execution. The broad scope of affected products (six major Apple operating systems) and the availability of vendor patches across all platforms indicate this is a real but contained threat. The absence of CVSS scoring, EPSS data, and any evidence of public proof-of-concept or KEV listing suggests this is a lower-priority remediation compared to critical remote code execution vulnerabilities, though the ecosystem-wide nature demands systematic patching. Organizations should prioritize patching high-value or network-critical Apple devices but may deprioritize less critical endpoints. |
| Exploit ScenarioDerived | An attacker positioned on the same network as target Apple devices (such as on a compromised Wi-Fi network or within an internal corporate network) could craft malformed network traffic or packets designed to trigger the null pointer dereference in the affected code path. Upon processing this malicious input, the vulnerable Apple device would crash or become unresponsive, disrupting service availability. While this does not allow code execution or data theft, it could be weaponized to disable critical infrastructure or cause operational disruption in environments heavily dependent on Apple device availability. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 25, 2026
Denial-of-service attacks against multiple Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, and watchOS) result from improper null pointer handling that allows attackers in privileged network positions to crash affected systems. An attacker exploiting this CWE-476 vulnerability can render devices unavailable without user interaction. No patch is currently available, requiring users to apply mitigations until updates are released.
Earlier versions of this analysis (1)
A null pointer dereference vulnerability affecting Apple's operating systems across multiple platforms (iOS, iPadOS, macOS, tvOS, visionOS, and watchOS) has been addressed through improved input validation. An attacker in a privileged network position can exploit this vulnerability to cause a denial-of-service condition, preventing affected devices from functioning normally. Apple has released patches across all affected platforms, with no public evidence of active exploitation or public proof-of-concept code at this time.
RemediationAI
Immediately upgrade affected Apple devices to patched versions: iOS and iPadOS to 18.7.7 or later (or 26.4 for newer versions), macOS Sequoia to 15.7.5, macOS Sonoma to 14.8.5, macOS Tahoe to 26.4, and tvOS, visionOS, and watchOS to 26.4 or later. Refer to the detailed security advisories at https://support.apple.com/en-us/126792 through https://support.apple.com/en-us/126799 for platform-specific instructions. For organizations unable to patch immediately, implement network segmentation to restrict untrusted network access to affected devices and monitor for unexpected service interruptions that may indicate exploitation attempts. Prioritize patching devices in critical network roles or those exposed to untrusted networks.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 5 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability is a null pointer dereference (CWE category: improper null pointer handling), which occurs when code attempts to access memory through a null pointer without proper validation. The affected products span Apple's entire ecosystem: iOS and iPadOS (cpe:2.3:a:apple:ios_and_ipados), macOS across multiple versions including Sequoia (15.7.5), Sonoma (14.8.5), and Tahoe (26.4) (cpe:2.3:a:apple:macos), tvOS (cpe:2.3:a:apple:tvos), visionOS (cpe:2.3:a:apple:visionos), and watchOS (cpe:2.3:a:apple:watchos). The root cause involves insufficient input validation before dereferencing a pointer, allowing a network-positioned attacker to trigger the null pointer condition and crash the affected component.
Know when iOS gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. A user in a privileged network position may be able to cause a denial-of-service.
Executive ViewAI
Organizations using A null pointer dereference should be aware of moderate risk from CVE-2026-28886, a null pointer dereference vulnerability rated CVSS 5.9. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: enable ASLR/DEP, apply network segmentation.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A null pointer dereference occurs when a program attempts to access memory through a pointer that has been set to NULL (address 0x0).
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Related Vulnerabilities in macOS Tahoe 26.4 Security Updates
View all 67Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 7.8), this vulnerability
The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensiti
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
Remote code execution in Google Chrome for iOS prior to 156.0.8078.47 is possible when a victim opens a crafted HTML pag
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mo
Hardcoded TURN relay credentials in the Girafit camera app (Android and iOS) version 1.9.1 and earlier expose a shared,
A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticate
Arbitrary code execution in Jellyfin iOS GitHub Actions workflow. CVSS 10.0.
Memory corruption vulnerabilities in Apple's graphics texture processing engine across iOS, iPadOS, macOS, tvOS, visionO
Buffer overflow memory corruption in Apple file parsing components allows remote code execution across iOS 18.6, iPadOS
A use-after-free issue was addressed with improved memory management. Rated critical severity (CVSS 9.8), this vulnerabi
Exploit-DB