Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Tahoe 26.7, tvOS 26.5, tvOS 27, visionOS 26.5, visionOS 27, watchOS 26.5, watchOS 27. An app may be able to cause unexpected system termination.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-12 | 4 | Disclosure2General1Patch1 |
| 2026-05-20 | 2 | Disclosure1General1 |
Apple patched CVE-2026-28969, a use-after-free vulnerability in IOTimeSyncFamily / IOTimeSyncClockManager affecting iOS/iPadOS. Glad to be credited in Apple’s advisory alongside Mihalis Haatainen and Ari Hawking. #infosec #apple #cve https://t.co/7gV1Aq8RMa
Post summary
Apple has issued a patch for CVE‑2026‑28969, a use‑after‑free bug in IOTimeSync, with no reports of active exploitation.
New blog from GanaSec: The 2017 Ghost in the Time Machine Hunting IOTimeSyncFamily on macOS Our Researcher Ashish Kunwar (@D0rkerDevil) independently discovered CVE-2026-28969 - a use-after-free race condition in Apple's IOTimeSyncFamily kernel extension.
Post summary
The text announces the discovery of CVE-2026-28969, a use‑after‑free race condition in macOS's IOTimeSyncFamily kernel extension, without any information on PoC, exploits, or patches.
Hunting IOTimeSyncFamily on macOS 26 | CVE-2026-28969 https://ganasec.com/blog/the-2017-ghost-in-the-time-machine-hunting-iotimesyncfamily https://t.co/6U96cLn99a
Post summary
The tweet merely announces hunting of IOTimeSyncFamily on macOS 26 referencing CVE-2026-28969 and posts a blog link, without providing technical or exploit details.
iokit said “free me” Apple said “CVE-2026-28969” 😭🍎
Post summary
The tweet merely references CVE-2026-28969 without additional context or details.
Proud moment for GanaSec X Apple 🍎 Our researcher @D0rkerDevil responsibly disclosed a security vulnerability in Apple’s IOKit framework, contributing to a safer ecosystem through responsible security research. Acknowledged by Apple Security Team under CVE-2026-28969. https://t.co/bRgscKDCWs
Post summary
A responsible disclosure of CVE-2026-28969 was announced for Apple’s IOKit framework; Apple acknowledged the issue but no technical details or patch information were provided.
First blog is up. The 2017 Ghost. CVE-2026-28969. Kernel UAF in IOTimeSyncClockManagerUserClient. Same root cause as CVE-2017-13847. Patch got lost in a refactor and the bug came back. Eight years later. http://bountyy.fi/blog/the-2017-ghost #cve #apple #bugbounty
Post summary
The blog post reports the re‑emergence of kernel UAF CVE‑2026‑28969, noting it shares a root cause with an older CVE and that the patch was lost during refactoring.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |