high8.8
CVE-2026-28931
A buffer overflow was addressed with improved bounds checking.
Impact
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 26.6 |
| Apple | Iphone Os | before 26.6 |
| Apple | Macos | from 26.0 before 26.6 |
| Apple | Tvos | before 26.6 |
| Apple | Watchos | before 26.6 |