Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
This issue was addressed with improved checks. An app may be able to enumerate a user’s installed apps. The issue is fixed in iOS 26.4, iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, and watchOS 26.4.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4 | CVE-2026-28882 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a device with the affected operating systems. The app could potentially enumerate the installed applications on the device, leading to unauthorized access to user data or other sensitive information.
Affected Products
- iOS: Affected version allows enumeration of installed apps.
- iPadOS: Affected version allows enumeration of installed apps.
- macOS Tahoe: Affected version allows enumeration of installed apps.
- tvOS: Affected version allows enumeration of installed apps.
- visionOS: Affected version allows enumeration of installed apps.
- watchOS: Affected version allows enumeration of installed apps.
Mitigation
Users are advised to update their devices to the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities.