CVE-2026-28990 Apple CVE debrief

Who should care

Organizations and individuals using Apple products, especially those with HIGH severity vulnerabilities, should prioritize patching and monitoring. This includes operators of affected systems, security teams, and vulnerability management teams. They should review the official CVE record and NVD details, and plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Technical summary

The CVE-2026-28990 vulnerability is caused by improper memory handling when processing maliciously crafted images. This issue affects multiple Apple products, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Apple has released updates to address this vulnerability. The vulnerability has a CVSS score of 7.5 and is classified as HIGH severity. To address this vulnerability, defenders should apply the latest security updates and review compensating controls for affected systems.

Defensive priority

High-priority defensive actions are required to address this HIGH severity vulnerability.

Recommended defensive actions

• Apply the latest security updates for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
• Ensure all Apple devices are updated to the latest versions: iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5.
• Review and implement compensating controls for affected systems that cannot be immediately patched.
• Monitor system logs for potential exploitation attempts.
• Perform regular vulnerability assessments and penetration testing to identify potential weaknesses.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Evidence notes

The CVE-2026-28990 record indicates a HIGH severity vulnerability with a CVSS score of 7.5. Apple has addressed the issue with improved memory handling in various operating system updates. The vulnerability is related to improper memory handling when processing maliciously crafted images, affecting multiple Apple products, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. To verify the vulnerability, defenders should review the official CVE record and NVD details, and check for affected product deployments in managed environments.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.