{"id":"CVE-2026-28967","revision":"5180b5ae07d346afba2c98c11115cf87","records":[{"revision":"5180b5ae07d346afba2c98c11115cf87","observedAt":"2026-10-26T21:35:30.991+00:00","statement":{"source":"cve-program","id":"CVE-2026-28967","aliases":[],"title":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.","description":"A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4. An attacker in a privileged network position may be able to cause a denial-of-service.","state":0,"publishedAt":"2026-05-11T20:08:25.332+00:00","modifiedAt":"2026-10-26T20:39:42.303+00:00","affected":[{"ecosystem":"Vendor product","name":"iOS and iPadOS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Apple\",\n                    \"product\": \"iOS and iPadOS\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"lessThan\": \"18.7.7\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"lessThan\": \"26.4\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://support.apple.com/en-us/126792","https://support.apple.com/en-us/126793"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-28967","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-28967","identifiers":["CVE-2026-28967"]},"retained":false,"historicalAffected":[]}],"coverage":[]}