EUVD-2026-49500
GHSA-w23g-g2m3-8h4f
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAccess local network
-
DeliverySend crafted network packets to target
-
ExploitUser interaction on device
-
ExecutionTrigger memory exhaustion in OS
-
ImpactDenial-of-service (system crash or freeze)
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V2 - Validation and Business Logic Resource consumption limits
MITRE ATT&CK
1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The attacker must be on the same local network (e.g., Wi-Fi) as the target device. Additionally, user interaction is required (CVSS UI:R) - the victim must be actively using the device or running an application that processes the malicious input. The vulnerability does not require authentication, but the local network adjacency and user interaction limit exploitation opportunities in typical deployments. |
| Impact | The CVSS base score is 5.5 (Medium) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. However, the description states the attacker must be on the local network, suggesting AV:A (Adjacent Network) is more appropriate; this discrepancy should be verified with the vendor. The EPSS score of 0.17% indicates very low exploitation probability, and there is no indication of active exploitation (no CISA KEV, no public proof-of-concept). Given the need for user interaction and local network access, this is a low-risk issue in practice, despite the theoretical denial-of-service impact. |
| Exploit ScenarioDerived | An attacker on the same Wi-Fi network sends a crafted sequence of network packets to a vulnerable Apple device. If the user is browsing or using an app that processes such traffic, the device's memory is exhausted, causing a denial-of-service condition that may crash the system or force a restart. No public proof-of-concept is known. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 28, 2026
Denial-of-service in multiple Apple operating systems allows a local network attacker to cause resource exhaustion and system unavailability. The vulnerability is addressed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No public exploit or active exploitation has been identified at this time, and the EPSS score is low (0.17%).
RemediationAI
Apply the vendor-released patches immediately. For iOS/iPadOS, upgrade to version 26.6; for macOS, upgrade to Sequoia 15.7.8, Sonoma 14.8.8, or Tahoe 26.6; for tvOS to 26.6; for visionOS to 26.6; for watchOS to 26.6. No workarounds are provided; however, restricting network access to trusted devices only may reduce exposure. Side effect: upgrading may require rebooting devices and could introduce compatibility issues with older applications.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 5 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a CWE-400 Uncontrolled Resource Consumption, stemming from improper memory handling in Apple's operating system core components. Affected products include iOS & iPadOS, macOS (multiple versions), tvOS, visionOS, and watchOS, as identified by the CPE strings. The root cause involves a lack of bounds or resource limits when processing certain network input, leading to excessive memory consumption.
Know when Tvos gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector set to Adjacent because attacker required on local network; all other metrics unchanged from NVD.
Primary rating from Vendor (apple).
CVSS VectorVendor: apple
Lifecycle Timeline
4DescriptionCVE.org
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker on the local network may be able to cause a denial-of-service.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01
WebKit memory corruption in Safari 18.6 and multiple Apple platforms allows remote code execution when processing malici
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrar
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is low attack comp
Apple kernel lock state checking flaw allows a malicious application to cause unexpected changes in memory shared betwee
An issue was discovered in certain Apple products. Rated high severity (CVSS 7.8), this vulnerability is no authenticati
Apple kernel memory corruption in multiple operating systems allows a malicious application to cause unexpected system t
Out-of-bounds write (CWE-787) in QtWebEngine before 6.10.1-r2 on Alpine Linux, and in other Chromium-based engines such
WebKit arbitrary code execution via use-after-free memory corruption affects Safari 26.2, iOS/iPadOS 18.7.3 through 26.2
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor repo
Exploit-DB