Product:
iOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially fingerprint the user. The problem has been fixed in iOS 26.4 and other related operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28863 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that can request permissions to access user data. Once the app is installed, it could use the permissions granted to gather information about the user, potentially leading to privacy violations.
Affected Products
- iOS 26.4 – Fixed permissions issue that could allow user fingerprinting.
- iPadOS 26.4 – Addressed similar vulnerabilities as in iOS.
- tvOS 26.4 – Updated to enhance user privacy protections.
- visionOS 26.4 – Includes fixes for the permissions issue.
- watchOS 26.4 – Mitigated risks associated with user fingerprinting.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, tvOS, visionOS, and watchOS to mitigate the risks associated with this vulnerability. Regularly updating software can help protect against potential exploits.