CVE-2026-28835

MEDIUM

Apple Macos < 14.8.5 - Use After Free

Title source: rule

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Mounting a maliciously crafted SMB network share may lead to system termination.

References (3)

https://support.apple.com/en-us/126794

https://support.apple.com/en-us/126795

https://support.apple.com/en-us/126796

Scores

CVSS v3 6.5

EPSS 0.0004

EPSS Percentile 12.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-416

Status published

Products (4)

Apple/macOS < 14.8.5

Apple/macOS < 15.7.5

Apple/macOS < 26.4

apple/macos 14.0 - 14.8.5

Published Mar 25, 2026

Tracked Since Mar 25, 2026