CVE-2026-28931

8.8 Élevée

Publiée le 27/07/2026 à 23:16 · Modifiée le 29/07/2026 à 07:16 · Analysée par le NVD · Source : product-security@apple.com

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.

Traduire en français

Produits concernés

Apple iOS and iPadOS
Apple macOS
Apple tvOS
Apple watchOS
Apple ipados
Apple iphone os

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-120

Références

https://support.apple.com/en-us/128066 Release NotesVendor Advisory
https://support.apple.com/en-us/128067 Release NotesVendor Advisory
https://support.apple.com/en-us/128068 Release NotesVendor Advisory
https://support.apple.com/en-us/128069 Release NotesVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories