Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-28992

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An attacker may be able to cause unexpected app termination.

VectorLOCAL

PublishedMay 11, 2026, 21:18

Published Byproduct-security@apple.com

Base Score

Score4.7

Affected Versions

No affected versions found.

References

https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127111
https://support.apple.com/en-us/127115
https://support.apple.com/en-us/127116
https://support.apple.com/en-us/127117
https://support.apple.com/en-us/127118
https://support.apple.com/en-us/127119
https://support.apple.com/en-us/127120

Weakness Type

CWE-362

CVSS Metrics

Base Score

4.7

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

LOCAL