EUVD-2026-15087Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Type safety enforcement
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | This vulnerability presents a limited real-world risk profile despite affecting multiple Apple platforms. The CVSS and EPSS scores are unavailable, limiting formal severity quantification, but the technical impact is constrained to denial of service (application crashes) rather than code execution, privilege escalation, or data exfiltration. The attack vector appears to be local or network-adjacent based on the need to trigger type confusion within an application context. No public exploits or proofs of concept are documented, and there is no evidence of active exploitation in the wild or KEV candidacy. The attack requires application-level interaction and does not facilitate unauthorized system access. Patch availability across all platforms within defined version ranges (iOS 26.4, macOS variants, tvOS 26.4, visionOS 26.4, watchOS 26.4) reduces practical risk for patched systems. This is a moderate priority maintenance issue rather than a critical security incident. |
| Exploit ScenarioDerived | An attacker could craft a malicious input or trigger a specific sequence of operations within a vulnerable application that causes a type confusion condition in the OS kernel or system libraries. Upon encountering the type-confused memory, the application crashes unexpectedly, disrupting user workflows or service availability. For example, a specially crafted file or network packet processed by a system service could trigger the vulnerability, causing that service to terminate and potentially affecting dependent applications. This attack requires no elevated privileges and could be triggered remotely if the affected application processes untrusted data from network sources. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 25, 2026
Type confusion in Apple's iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows local attackers to trigger unexpected application termination through memory corruption. The vulnerability affects multiple OS versions and currently lacks a publicly available patch. An attacker with local access can exploit this to cause denial of service by crashing targeted applications.
Earlier versions of this analysis (1)
A type confusion vulnerability in Apple's operating systems allows attackers to trigger unexpected application termination through improved memory handling bypass. This affects iOS, iPadOS, macOS (Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4), tvOS, visionOS, and watchOS versions prior to their respective 26.4 releases. The vulnerability results in denial of service through app crashes, with patches available across all affected platforms and no active exploitation indicators reported.
RemediationAI
Upgrade to the patched versions immediately: iOS 26.4, iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4 or later. Consult the corresponding Apple support advisories (https://support.apple.com/en-us/126792 through 126799) for platform-specific upgrade procedures and timing. For organizations unable to patch immediately, implement application monitoring to detect and log unexpected terminations that may indicate exploitation attempts, and restrict untrusted application installations pending update deployment. Prioritize patching based on exposure: devices with continuous internet connectivity and multi-user access should be updated first.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 5 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability stems from a type confusion flaw in memory management within Apple's core operating system frameworks. Type confusion occurs when code incorrectly interprets memory as a different data type than intended, leading to unsafe operations. The vulnerability affects the Apple ecosystem broadly as indicated by CPE coverage spanning iOS and iPadOS (cpe:2.3:a:apple:ios_and_ipados), macOS (cpe:2.3:a:apple:macos), tvOS (cpe:2.3:a:apple:tvos), visionOS (cpe:2.3:a:apple:visionos), and watchOS (cpe:2.3:a:apple:watchos). The root cause involves improper type handling in memory allocation and deallocation routines, classified under memory safety defects. The fix involves improved type validation and bounds checking in memory operations across these platforms.
Know when iOS gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected app termination.
Executive ViewAI
Organizations using A type confusion should be aware of moderate risk from CVE-2026-28822 rated CVSS 6.2. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Related Vulnerabilities in macOS Tahoe 26.4 Security Updates
View all 67Apple's kernel across all platforms (iOS, macOS, watchOS, visionOS, tvOS) contains a memory corruption vulnerability (CV
A use-after-free issue was addressed with improved memory management. Rated high severity (CVSS 7.8), this vulnerability
The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensiti
The issue was addressed with improved checks. Rated high severity (CVSS 7.0). Actively exploited in the wild (cisa kev)
Remote code execution in Google Chrome for iOS prior to 156.0.8078.47 is possible when a victim opens a crafted HTML pag
Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mo
Hardcoded TURN relay credentials in the Girafit camera app (Android and iOS) version 1.9.1 and earlier expose a shared,
A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticate
Arbitrary code execution in Jellyfin iOS GitHub Actions workflow. CVSS 10.0.
Memory corruption vulnerabilities in Apple's graphics texture processing engine across iOS, iPadOS, macOS, tvOS, visionO
Buffer overflow memory corruption in Apple file parsing components allows remote code execution across iOS 18.6, iPadOS
A use-after-free issue was addressed with improved memory management. Rated critical severity (CVSS 9.8), this vulnerabi
GitHub PoC
Exploit-DB