Product:
iOS, iPadOS, macOS, visionOS
Summary
This issue was addressed with improved access restrictions. Processing maliciously crafted web content may disclose sensitive user information. The issue is fixed in the latest versions of iOS, iPadOS, macOS, and visionOS.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28962 |
Exploitation
An attacker can exploit this vulnerability by crafting malicious web content that, when processed by the affected devices, could lead to the disclosure of sensitive user information. The attack requires no user interaction and can be executed over a network, making it relatively easy for an attacker to exploit.
Affected Products
- iOS 18.7.9 and later: Addresses access restrictions to prevent information disclosure.
- iPadOS 18.7.9 and later: Similar fixes as iOS for iPad devices.
- macOS Tahoe 26.5 and later: Enhancements to access restrictions for macOS users.
- visionOS 26.5 and later: Updates to protect sensitive information on visionOS devices.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS, iPadOS, macOS, and visionOS. Regularly applying software updates is crucial to protect against potential exploits and ensure that access restrictions are properly enforced.