An integer overflow was addressed with improved input validation. (CVE-2026-28973)
An integer overflow vulnerability was addressed by improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, and watchOS. The flaw could allow a malicious app to escape its sandbox. The issue is fixed in versions iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6.
AI Analysis
Technical Summary
CVE-2026-28973 is an integer overflow vulnerability classified under CWE-190 that was mitigated by improved input validation. This vulnerability affects several Apple operating systems and could allow a malicious application to break out of its sandbox, potentially leading to elevated privileges and unauthorized access. The vulnerability has a CVSS v3.1 score of 8.6, indicating high severity with impacts on confidentiality, integrity, and availability. The issue is resolved in specific updated versions of iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, and watchOS.
Potential Impact
A malicious app exploiting this integer overflow could escape its sandbox environment, potentially gaining elevated privileges and access to restricted system resources. This could lead to significant compromise of system confidentiality, integrity, and availability as indicated by the high CVSS score.
Mitigation Recommendations
The vulnerability is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6. Users and administrators should update affected Apple operating systems to these versions or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
An integer overflow was addressed with improved input validation. (CVE-2026-28973)
Description
An integer overflow vulnerability was addressed by improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, and watchOS. The flaw could allow a malicious app to escape its sandbox. The issue is fixed in versions iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6.
CVSS v3.1
Score 8.6high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-28973 is an integer overflow vulnerability classified under CWE-190 that was mitigated by improved input validation. This vulnerability affects several Apple operating systems and could allow a malicious application to break out of its sandbox, potentially leading to elevated privileges and unauthorized access. The vulnerability has a CVSS v3.1 score of 8.6, indicating high severity with impacts on confidentiality, integrity, and availability. The issue is resolved in specific updated versions of iOS, iPadOS, macOS Sequoia, macOS Sonoma, macOS Tahoe, and watchOS.
Potential Impact
A malicious app exploiting this integer overflow could escape its sandbox environment, potentially gaining elevated privileges and access to restricted system resources. This could lead to significant compromise of system confidentiality, integrity, and availability as indicated by the high CVSS score.
Mitigation Recommendations
The vulnerability is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and watchOS 26.6. Users and administrators should update affected Apple operating systems to these versions or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-q9xv-pwq9-9x39
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-28973"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a83aa7dbf8831d539e32b27
Added to database: 08/18/2026, 00:42:37 UTC
Last enriched: 08/18/2026, 00:56:57 UTC
Last updated: 08/18/2026, 01:52:31 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.