What is the CVSS score of CVE-2026-28985?

CVE-2026-28985 has a CVSS 3.1 base score of 6.2 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-28985?

Yes, a patch is available for CVE-2026-28985. Update the affected software to the latest version immediately.

Apple iOS, iPadOS, macOS, tvOS CVE-2026-28985

EUVD-2026-29279 MEDIUM

NULL Pointer Dereference (CWE-476)

2026-05-11 apple

GHSA-w9f3-jqrp-mw9r

Denial Of Service Apple Null Pointer Dereference

6.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.2 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

May 12, 2026 - 18:25 vuln.today

CVSS changed

May 12, 2026 - 18:22 NVD

6.2 (MEDIUM)

Patch available

May 11, 2026 - 22:18 EUVD

CVE Published

May 11, 2026 - 20:08 nvd

UNKNOWN (no severity yet)

CVE Published

May 11, 2026 - 20:08 nvd

MEDIUM 6.2

DescriptionCVE.org

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5. An attacker on the local network may be able to cause a denial-of-service.

AnalysisAI

Null pointer dereference in Apple operating systems (iOS, iPadOS, macOS Tahoe, tvOS) allows local network attackers to cause denial of service by sending crafted input that bypasses validation. The vulnerability affects all versions prior to iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and tvOS 26.5. No code execution or data compromise is possible; impact is limited to availability disruption on affected devices.

Technical ContextAI

A null pointer dereference vulnerability (CWE-476) occurs when application code attempts to dereference a pointer that has not been initialized or has been set to null, typically due to insufficient input validation. In this Apple ecosystem vulnerability, inadequate validation of local network input allows an attacker to craft a malicious input that causes the underlying code path to attempt dereferencing a null pointer, resulting in a crash or service interruption. The vulnerability is present across multiple Apple platforms (iOS, iPadOS, macOS, tvOS) suggesting a shared codebase or library component processes local network input on these systems.

RemediationAI

Vendor-released patch: Update to iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, or tvOS 26.5 depending on affected device. Users should enable automatic updates in their device settings (Settings > General > Software Update > Automatic Updates on iOS/iPadOS; System Settings > General > Software Update on macOS) to receive patches as soon as available. For enterprise environments, deploy these updates through Mobile Device Management (MDM) solutions or Mac management tools to ensure timely remediation across device fleets. No workarounds are available for devices unable to update immediately; network segmentation can reduce attack surface by restricting local network access to devices via firewall rules, though this may impact device functionality for legitimate local network services (AirPlay, HomeKit, etc.). Prioritize patching for devices that handle sensitive workloads or operate in shared network environments where untrusted local clients may be present.