Product:
iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS
Summary
An information leakage was addressed with additional validation. This issue allows an app to potentially access sensitive user data. The problem has been fixed in the latest versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28870 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a device with the affected operating systems. The app could leverage the information leakage to access sensitive user data without proper authorization, potentially compromising user privacy.
Affected Products
- iOS: Vulnerable to information leakage allowing access to sensitive user data.
- iPadOS: Similar vulnerability as iOS, affecting user data privacy.
- macOS Tahoe: Information leakage issue that could expose sensitive data.
- tvOS: Vulnerable to the same information leakage as other platforms.
- visionOS: Affected by the information leakage issue.
- watchOS: Vulnerable to the same data exposure risk.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS. The updates include additional validation to prevent unauthorized access to sensitive user data.