CVE-2026-28995 - Vulnerability Analysis

Overview

Apple iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5 contain a sandbox escape vulnerability caused by a logic issue, letting malicious apps break out of their sandbox, exploit requires malicious app installation.

Severity & Score

Impact

Malicious apps can break out of sandbox, potentially leading to privilege escalation and unauthorized system access.

Mitigation

Update to iOS 18.7.9, iPadOS 18.7.9, iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5.

References

• https://support.apple.com/en-us/127118
• https://support.apple.com/en-us/127119
• https://support.apple.com/en-us/127120
• https://support.apple.com/en-us/127110
• https://support.apple.com/en-us/127111
• https://support.apple.com/en-us/127115

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner