Product:
iOS and iPadOS
Summary
A logging issue was addressed with improved data redaction. Notifications marked for deletion could be unexpectedly retained on the device. This issue has been fixed in the latest versions of iOS and iPadOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2026-28950 |
Exploitation
The vulnerability can be exploited locally by an attacker who has access to the device. By accessing the notifications marked for deletion, an attacker could potentially view sensitive information that should have been removed. This requires no special privileges or user interaction, making it easier for an attacker to exploit.
Affected Products
- iOS 18.7.8 – Latest version addressing the logging issue.
- iPadOS 18.7.8 – Latest version addressing the logging issue.
- iOS 26.4.2 – Latest version addressing the logging issue.
- iPadOS 26.4.2 – Latest version addressing the logging issue.
Mitigation
To mitigate this issue, users should update their devices to the latest versions of iOS and iPadOS. This will ensure that the logging issue is resolved and that notifications marked for deletion are properly handled.