Product:
iOS, iPadOS, macOS Tahoe
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially access protected user data. The vulnerability has been fixed in the latest versions of iOS, iPadOS, and macOS Tahoe.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28855 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that takes advantage of the permissions issue to access sensitive user data without proper authorization. The attack can be executed over a network, requiring no user interaction, making it particularly dangerous.
Affected Products
- iOS: Affected by the permissions issue allowing unauthorized access to user data.
- iPadOS: Similar vulnerabilities exist, allowing apps to access protected data.
- macOS Tahoe: The permissions issue is also present, affecting user data security.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, and macOS Tahoe. Regularly updating software helps ensure that known vulnerabilities are patched and reduces the risk of exploitation.