Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Patch1 |
| 2026-05-17 | 1 | General1 |
| 2026-05-19 | 1 | Exploit1 |
| 2026-05-22 | 1 | Disclosure1 |
| 2026-06-06 | 1 | General1 |
New article at https://ret2p.lt/2025/05/17/AppleJPEGXL-CVE.html describing CVE-2026-28956 (vuln in AppleJPEGXL) Any constructive criticism is appreciated.
Post summary
The text merely references an external article about CVE-2026-28956 with no additional details.
Original scheduled payment: June. Now: July. Yeah; uh... what's going on, Apple? @AppleSupport (no clue if this'll help but hey; whatever). Re: ASB payout for CVE-2026-28956 for Apple Support I budgeted around this. Damn. https://t.co/XvsL5oWkEw
Post summary
The tweet mentions CVE‑2026‑28956 and refers to an ASB payout, but provides no technical details, PoC, exploit, patch or evidence of active exploitation.
I was Googling my CVE and uh https://www.sentinelone.com/vulnerability-database/cve-2026-28956/ I laughed. @SentinelOne hi i found this vulnerability It affects macOS, iOS, anything using the library. Please refer to my article about the vulnerability on https://ref2p.lt (“Requiem”) to know more how this
Post summary
The user cited CVE‑2026‑28956 and linked to an article titled "Requiem," mentioning that it impacts macOS and iOS devices, but provided no exploitation, patch, or detailed vulnerability data.
@0xjohnny I gave claude sonnet a writeup on cve-2026-28956 and lara’s source code and now it’s getting code execution in a privileged process working (should work up to ios 26.2.1 in theory, likely excluding mte devices)
Post summary
The user reports progress in exploiting CVE-2026-28956 to achieve code execution on iOS 26.2.1, suggesting ongoing development of an exploitation method but without providing a full working exploit or PoC.
@kylemsguy unpatched for now; but needs a chain stay on 26.4.x (CVE-2026-28956 might be able to do something in combo if you're creative enough; entitlements) it'd be funny as fuck though.
Post summary
The comment notes that CVE-2026-28956 is currently unpatched and recommends staying on version 26.4.x as a workaround, with no exploit or detailed vulnerability description provided.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |