Cyber Resilience

CVE-2026-28929

High

Published: 11 May 2026

Published
11 May 2026
Modified
12 May 2026
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0041 32.7th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-28929 is a high-severity Incorrect Comparison Logic Granularity (CWE-1254) vulnerability in Apple Macos. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Disable or Modify Tools (T1685); ranked at the 32.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Replying to an email could display remote images in Mail in Lockdown Mode.

CWE(s)
CWE-1254

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1685 Disable or Modify Tools Defense Impairment
Adversaries may disable, degrade, or tamper with security tools or applications (e.
attack.mitre.org →
Why these techniques?

Bypasses Lockdown Mode email image restriction via logic flaw, directly impairing a security defense tool.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2024-54507Same product: Apple Ipados
CVE-2026-28855Same product: Apple Ipados
CVE-2025-24177Same product: Apple Ipados
CVE-2026-28954Same product: Apple Ipados
CVE-2026-43656Same product: Apple Ipados
CVE-2026-20606Same product: Apple Ipados
CVE-2025-43202Same product: Apple Ipados
CVE-2026-28951Same product: Apple Ipados
CVE-2025-30456Same product: Apple Ipados
CVE-2026-28894Same product: Apple Ipados

Affected Assets

apple
ipados
≤ 18.7.9
apple
iphone os
≤ 18.7.9
apple
macos
14.0 — 14.8.7 · 15.0 — 15.7.7 · 26.0 — 26.5

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References