Product:
iOS, iPadOS, macOS Tahoe, visionOS, watchOS
Summary
A permissions issue was addressed with additional restrictions. This issue allows an app to potentially bypass certain Privacy preferences. The problem has been fixed in the latest versions of the affected products.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-28988 |
Exploitation
To exploit this vulnerability, an attacker would need to have local access to the device. By leveraging the permissions issue, the attacker could manipulate the app’s behavior to bypass privacy settings, potentially accessing sensitive user data without proper authorization.
Affected Products
- iOS 26.5 – Updated to address the permissions issue.
- iPadOS 26.5 – Fixed the vulnerability that allowed privacy preferences to be bypassed.
- macOS Tahoe 26.5 – Includes additional restrictions to prevent exploitation.
- visionOS 26.5 – Addresses the permissions issue effectively.
- watchOS 26.5 – Updated to enhance privacy protections.
Mitigation
To mitigate this vulnerability, users should ensure that their devices are updated to the latest versions of iOS, iPadOS, macOS Tahoe, visionOS, and watchOS. Regularly updating devices helps protect against known vulnerabilities and enhances overall security.