Product:
iOS, iPadOS, macOS Tahoe, visionOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to enumerate a user’s installed apps. The vulnerability has been fixed in the latest versions of iOS, iPadOS, macOS Tahoe, and visionOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-28833 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious app on a device with the affected operating systems. The app could potentially enumerate the installed applications on the device, leading to unauthorized access to sensitive information about the user’s app usage.
Affected Products
- iOS: Affected version allows apps to enumerate installed applications.
- iPadOS: Similar vulnerability as in iOS, affecting app enumeration.
- macOS Tahoe: Vulnerability present that allows app enumeration.
- visionOS: Affected by the same permissions issue allowing app enumeration.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, and visionOS to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities.