Product:
iOS
Summary
An inconsistent user interface issue was addressed with improved state management. This issue may allow an app to access sensitive user data. The problem has been fixed in iOS 26.5, iPadOS 26.5, and visionOS 26.5.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-28964 |
Exploitation
To exploit this vulnerability, an attacker could create a malicious app that takes advantage of the inconsistent user interface. By manipulating the app’s state management, the attacker may gain unauthorized access to sensitive user data without requiring user interaction.
Affected Products
- iOS: Affected by the inconsistent user interface issue allowing potential access to sensitive data.
- iPadOS: Similar vulnerabilities exist as in iOS, affecting user data security.
- visionOS: Also impacted by the same issue, posing risks to user data integrity.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS 26.5, iPadOS 26.5, or visionOS 26.5. Regularly updating software can help protect against known vulnerabilities and improve overall security.