Product:
iOS, iPadOS, macOS
Summary
An authorization issue was addressed with improved state management. This issue allows an app to potentially gain root privileges. The vulnerability affects multiple versions of iOS, iPadOS, and macOS. Users are advised to update their devices to the latest versions to mitigate the risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-28951 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. Due to the low attack complexity and local attack vector, the attacker could gain elevated privileges, allowing them to execute arbitrary code with root access. This could lead to unauthorized access to sensitive data and system resources.
Affected Products
- iOS 18.7.9 – Affected by the authorization issue allowing root privileges.
- iPadOS 18.7.9 – Similar vulnerability as iOS, allowing unauthorized access.
- macOS Sequoia 15.7.7 – Vulnerable to the same authorization issue.
- macOS Sonoma 14.8.7 – Also affected by the root privilege escalation vulnerability.
- macOS Tahoe 26.5 – Vulnerable to the authorization issue as well.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, or macOS as specified in the security advisory. Regularly applying updates helps protect against known vulnerabilities and enhances overall device security.