A vulnerability described as problematic has been identified in Apple iOS, iPadOS, macOS, tvOS and visionOS up to 26.4. The affected element is an unknown function of the component Web Handler. The manipulation results in denial of service.

This vulnerability was named CVE-2026-28905. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.