CVE-2026-28917

Overview

Advisory: Apple Security Advisory

Impact:

Description: Processing maliciously crafted web content may lead to an unexpected process crash

Researchers: Vitaly Simonovich

Attribute	Value
CVE	CVE-2026-28917
Bugzilla	310527
Component	WebKit
Bug Class	LogicError
Severity	medium
Commit	cf2e67ecb9131bdf…
Advisory	Apple Advisory

Root Cause Analysis

The issue was addressed with improved input validation.

Files Changed

Source Files

• Source/ThirdParty/ANGLE/src/libANGLE/renderer/metal/ProvokingVertexHelper.mm