Product:
iOS, iPadOS, macOS, visionOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to enumerate a user’s installed apps. The vulnerability has been fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-28880 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious app that takes advantage of the permissions issue. Once installed on a user’s device, the app could potentially enumerate the installed applications without the user’s consent, leading to privacy concerns.
Affected Products
- iOS 18.7.7 – Fixed permissions issue with additional restrictions.
- iPadOS 18.7.7 – Fixed permissions issue with additional restrictions.
- macOS Sequoia 15.7.5 – Fixed permissions issue with additional restrictions.
- macOS Sonoma 14.8.5 – Fixed permissions issue with additional restrictions.
- macOS Tahoe 26.4 – Fixed permissions issue with additional restrictions.
- visionOS 26.4 – Fixed permissions issue with additional restrictions.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, macOS, and visionOS to mitigate this vulnerability. Regularly updating software helps protect against known vulnerabilities and enhances overall security.