Skip to main content

iOS and iPadOS CVE-2026-28984

| EUVDEUVD-2026-60496 MEDIUM
Buffer Overflow (CWE-119)
2026-08-17 apple GHSA-mrh2-m3hr-6phv
Buffer Overflow Apple Red Hat Ios And Ipados Suse
4.3
CVSS 3.1 · Vendor: apple
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Craft malicious web content
  2. Delivery
    Distribute URL via phishing or malvertising
  3. Exploit
    Victim opens URL in Safari
  4. Execution
    Web content processing triggers memory handling flaw
  5. Impact
    Safari crashes unexpectedly

Vulnerability Assessment

Weakness
CWE
CWE-119
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK

2 techniques across 2 tactics: Execution, Privilege Escalation

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

The victim must actively open a maliciously crafted URL or web page in Safari on an unpatched iOS or iPadOS device - user interaction is required (UI:R per CVSS vector). No authentication, special configuration, or non-default deployment mode is required; any standard iOS or iPadOS device running a version prior to 18.7.10 with Safari is vulnerable. Exploitation is limited to causing a Safari process crash (denial of service); there is no identified path to code execution, data theft, or persistent compromise based on available data. The requirement for user interaction (visiting the attacker-controlled page) is the primary limiting factor and reduces the risk of automated or mass exploitation.
Impact

The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L correctly characterizes this as a network-reachable, low-complexity flaw requiring user interaction with no elevated privileges needed, but delivering only a limited availability impact (Safari crash) with no scope change. The CVSS base score of 4.3 (Medium) is consistent with the bounded impact. No EPSS data was provided in the source intelligence, but the absence of KEV listing and POC code suggests exploitation probability is currently low. The SSVC technical impact is partial (process crash, not arbitrary code execution), and the automatable axis is constrained by the UI:R requirement - mass exploitation would require a phishing or malvertising campaign to drive victims to the crafted page. Even a mid-sized municipal IT team in zabrze should treat this as a routine monthly-patch priority rather than an emergency, given the restricted DoS-only impact. Signals are internally consistent: the CVSS vector, description, and CWE all align on an availability-only memory safety flaw with no confidentiality or integrity dimension.
Exploit ScenarioDerived

An attacker crafts a web page containing maliciously structured content designed to trigger the memory handling flaw in Safari's web content processing engine. The attacker distributes the URL via phishing email, SMS, or malicious advertisement, causing an iOS or iPadOS user on an unpatched device to open the link in Safari, which results in an unexpected browser crash. No public proof-of-concept code has been identified at time of analysis.
This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).
Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Aug 18, 2026

Safari on iOS and iPadOS prior to version 18.7.10 crashes unexpectedly when processing maliciously crafted web content due to a memory handling flaw classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). The vulnerability is network-delivered but requires user interaction - a victim must open the crafted page in Safari - and its impact is limited strictly to availability, with no confidentiality or integrity exposure. No public exploit code is identified at time of analysis, and this CVE does not appear in the CISA Known Exploited Vulnerabilities catalog.

RemediationAI

Update affected devices to iOS 18.7.10 or iPadOS 18.7.10, which are confirmed vendor-released patches per Apple's advisory at https://support.apple.com/en-us/148287. Updates can be applied via Settings > General > Software Update on the device or through Apple Configurator or MDM in managed enterprise environments. If immediate patching is not feasible, the primary compensating control is to avoid opening untrusted URLs in Safari on affected devices; using an alternative browser does not fully mitigate this if the underlying WebKit rendering engine is shared. Restricting user access to unknown or untrusted web content through enterprise web filtering or DNS-layer controls reduces exposure until the patch can be deployed, though this does not eliminate risk entirely.

Affected VersionsENISA

iOS and iPadOS 0 <18.7.10

Affected Packages

euvd ios_and_ipados fix: 18.7.10

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

CWE-119 describes a class of memory safety bugs where software does not properly restrict read or write operations to within the intended bounds of a memory buffer, encompassing classic buffer overflows, out-of-bounds reads, and heap corruption primitives. In this case the flaw resides in the web content processing pipeline of Safari on Apple iOS and iPadOS, as confirmed by CPE cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*. Apple's advisory indicates the issue was addressed with improved memory handling, consistent with a bounds-checking or memory allocation fix in the browser's rendering or JavaScript engine. All iOS and iPadOS releases before 18.7.10 are affected according to EUVD-2026-60496 version range data.

Know when Ios And Ipados gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (apple) PRIMARY 4.3 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
vuln.today AI 4.3 MEDIUM

Network-delivered via web content (AV:N), no special conditions (AC:L), no authentication needed (PR:N), user must visit page (UI:R), impact is Safari crash only (A:L, C:N, I:N).

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
SUSE 6.5 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Red Hat 8.8 HIGH

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

4
CVSS changed
Aug 18, 2026 - 14:22 NVD
4.3 (MEDIUM)
Patch available
Aug 17, 2026 - 22:03 EUVD
CVE Published
Aug 17, 2026 - 21:30 cve.org
MEDIUM 4.3
CVE Published
Aug 17, 2026 - 21:30 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Threat Intelligence Overview

EPSS Score
0.1%
Top 98% exploitable
Prevalence
Ubiquitous
iOS and iPadOS deployed on hundreds of millions of active devices globally
Social Media
1
Sightings
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS Vulnrichment Vendor CIRCL VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity MEDIUM
CISA KEV No
Public POC No
EPSS 0.1%
Patch available Yes
Active threat No
Deciding rule
MEDIUM severity (CVSS 4.0-6.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation
None
System Exposure· derived
Open
Automatable
No
Human Impact· derived
High
Technical Impact
Partial

Priority Score

22
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +22
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

More in Ios And Ipados

View all
CVE-2026-86950 HIGH POC
8.8 Sep 28

Out-of-bounds write in Apple's iOS, iPadOS, and macOS file-parsing code lets remote attackers achieve arbitrary code exe
CVE-2026-43723 HIGH POC
7.8 Jul 27

Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability,
CVE-2026-65414 CRITICAL
9.8 Sep 14

An out-of-bounds write (CWE-787) in Apple's operating system family - iOS/iPadOS, macOS (Sequoia, Tahoe, and Golden Gate
CVE-2026-64771 CRITICAL
9.8 Jul 27

Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause
CVE-2026-43803 CRITICAL
9.8 Jul 27

Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be trigg
CVE-2026-43810 CRITICAL
9.8 Jul 27

Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.
CVE-2026-64770 CRITICAL
9.8 Jul 27

Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, ma
CVE-2026-64769 CRITICAL
9.8 Jul 27

Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected a
CVE-2026-64774 CRITICAL
9.8 Jul 27

We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sou
CVE-2026-64772 CRITICAL
9.8 Jul 27

Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an
CVE-2026-84561 CRITICAL
9.8 Sep 14

Kernel memory corruption in Apple's operating systems lets an app already running on a device trigger a double free (CWE
CVE-2026-84609 CRITICAL
9.8 Sep 14

A locally installed app on Apple iOS/iPadOS (before 27), macOS (before Golden Gate 27, Tahoe 26.7, or Sequoia 15.8), tvO

Same weakness CWE-119 – Buffer Overflow

View all
CVE-2020-0796 CRITICAL POC
10.0
CVE-2017-11882 HIGH POC
7.8
CVE-2014-6332 HIGH POC
8.8
CVE-2015-2426 HIGH POC
8.8
CVE-2013-3918 HIGH POC
8.8
CVE-2023-4966 HIGH POC
7.5
CVE-2017-11774 HIGH POC
7.8
CVE-2013-3660 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected

References

Advisories & patches
ADVISORY https://access.redhat.com/errata/RHSA-2026:25918 ADVISORY https://access.redhat.com/errata/RHSA-2026:25927 ADVISORY https://access.redhat.com/errata/RHSA-2026:27728 ADVISORY https://access.redhat.com/errata/RHSA-2026:27785 ADVISORY https://access.redhat.com/errata/RHSA-2026:27804 ADVISORY https://access.redhat.com/errata/RHSA-2026:28114 ADVISORY https://access.redhat.com/errata/RHSA-2026:28146 ADVISORY https://access.redhat.com/errata/RHSA-2026:28147 ADVISORY https://access.redhat.com/errata/RHSA-2026:28148 ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-28984 ADVISORY https://seclists.org/oss-sec/2026/q3/521 ADVISORY https://vuldb.com/vuln/391468 REF https://support.apple.com/en-us/127110 REF https://support.apple.com/en-us/127115 REF https://support.apple.com/en-us/127118 REF https://support.apple.com/en-us/127119 REF https://support.apple.com/en-us/127120 REF https://support.apple.com/en-us/127121 REF https://support.apple.com/en-us/148287

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy