Product:
Keychain
Summary
The issue was addressed with improved input validation. A local attacker may be able to modify the state of the Keychain. This vulnerability affects multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28860 |
Exploitation
To exploit this vulnerability, an attacker would need local access to the device. By leveraging the flaw in input validation, the attacker could potentially manipulate the Keychain state, leading to unauthorized access to sensitive information stored within it.
Affected Products
- iOS 18.7.7
- iPadOS 18.7.7
- macOS Sequoia 15.7.5
- macOS Sonoma 14.8.5
- macOS Tahoe 26.4
- tvOS 26.4
- visionOS 26.4
- watchOS 26.4
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Regularly applying security updates is crucial to protect against potential exploits.