Product:
Keychain
Summary
This issue was addressed with improved permissions checking. A local attacker may gain access to user’s Keychain items. The issue is fixed in several versions of iOS, iPadOS, macOS, visionOS, and watchOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2026-28864 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the device and require user interaction. By bypassing the permissions checks, the attacker can potentially access sensitive Keychain items stored on the device.
Affected Products
- iOS 18.7.7 – Fixed permissions issue to prevent unauthorized access to Keychain items.
- iPadOS 18.7.7 – Similar fix as iOS to enhance security for Keychain.
- macOS Sequoia 15.7.5 – Addressed the vulnerability to protect user data in Keychain.
- macOS Sonoma 14.8.5 – Improved permissions checking for Keychain access.
- macOS Tahoe 26.4 – Security enhancements related to Keychain items.
- visionOS 26.4 – Fixed the permissions issue affecting Keychain access.
- watchOS 26.4 – Addressed the vulnerability to secure Keychain items.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of iOS, iPadOS, macOS, visionOS, and watchOS. Regularly updating devices helps protect against known vulnerabilities and enhances overall security.