Product:
iOS, iPadOS, macOS, visionOS
Summary
This issue was addressed with improved data protection. An app may be able to access sensitive user data. The issue is fixed in iOS 26.5, iPadOS 26.5, macOS Tahoe 26.5, and visionOS 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28958 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the device and require user interaction. By tricking the user into running a malicious application, the attacker could potentially gain access to sensitive user data that should be protected.
Affected Products
- iOS: A mobile operating system for Apple devices, vulnerable to unauthorized data access.
- iPadOS: The operating system for iPads, also affected by the same data protection issue.
- macOS: The desktop operating system for Mac computers, which has similar vulnerabilities.
- visionOS: The operating system for Apple’s vision devices, susceptible to the same exploit.
Mitigation
To mitigate this issue, users should update their devices to the latest versions of iOS, iPadOS, macOS, and visionOS. Regularly updating software helps protect against vulnerabilities and ensures that data protection measures are in place.