Product:
iOS
Summary
The issue was addressed with improved checks. An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protected Apps with the passcode. This vulnerability poses a risk to user privacy and data security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.6 | CVE-2026-28895 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to the targeted iOS device. By bypassing the Stolen Device Protection feature, the attacker can potentially access sensitive biometrics-gated applications using the device’s passcode. This requires no special privileges or user interaction, making it a low-complexity attack.
Affected Products
- iOS 26.4: The latest version that addresses the vulnerability.
- iPadOS 26.4: The latest version for iPads that resolves the issue.
Mitigation
To mitigate this vulnerability, users should ensure that their devices are updated to the latest versions of iOS and iPadOS. Enabling additional security features and regularly monitoring device access can also help protect against unauthorized access.