CVE-2026-28929
High
Published: 11 May 2026
Published
11 May 2026
Modified
12 May 2026
KEV Added
—
Patch
—
CVSS Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0002
4.7th percentile
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-28929 is a high-severity Incorrect Comparison Logic Granularity (CWE-1254) vulnerability. Its CVSS base score is 7.5 (High).
Operationally, ranked at the 4.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
NVD Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. Replying to an email could display remote images in Mail in Lockdown Mode.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)