Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
A privacy issue was addressed by removing sensitive data. An app may be able to enumerate a user’s installed apps. This issue has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28878 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious application that, when installed on a device, could enumerate the apps installed by the user. This could lead to unauthorized access to sensitive information about the user’s app usage and preferences.
Affected Products
- iOS 18.7.7 and earlier
- iPadOS 18.7.7 and earlier
- macOS Sonoma 14.8.5 and earlier
- macOS Tahoe 26.4 and earlier
- tvOS 26.4 and earlier
- visionOS 26.4 and earlier
- watchOS 26.4 and earlier
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and enhance overall security.