VDB
CVE-2026-28859
CVE-2026-28859
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch. Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.
EPSS 0.56% · 44.8th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.56%
44.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Apple iOS <26.4 | |
| SUSE | SUSE Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| Apple | Apple Safari <26.4 | |
| Apple | Apple macOS Sonoma <14.8.5 | |
| Open Source | Open Source WebKitGTK <2.52.1 | |
| Apple | Apple iPadOS <18.7.7 | |
| Ubuntu | Ubuntu Linux | |
| Apple | Apple iPadOS <26.4 | |
| Amazon | Amazon Linux 2 | |
| Debian | Debian Linux | |
| Apple | Apple macOS Tahoe <26.4 | |
| Oracle | Oracle Linux | |
| Apple | Apple macOS Sequoia <15.7.5 | |
| Apple | Apple iOS <18.7.7 | |
| RESF | RESF Rocky Linux |
Timeline
- Mar 24, 2026 CVE Published
- Mar 25, 2026 EPSS Score
- Mar 25, 2026 Coalition ESS Score
- Mar 25, 2026 PoC Published
- Mar 27, 2026 PoC Published
- Apr 22, 2026 Distribution Patch
- Apr 22, 2026 Security Advisory
- Apr 22, 2026 Security Advisory
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
- Apr 29, 2026 Distribution Patch
- Apr 29, 2026 Security Advisory
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0853.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0853 advisory
- https://support.apple.com/en-us/126794 advisory
- https://support.apple.com/en-us/126795 advisory
- https://support.apple.com/en-us/126796 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0911.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0911 advisory
- https://wpewebkit.org/security/WSA-2026-0002.html advisory
- https://seclists.org/oss-sec/2026/q1/399 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-April/025356.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-April/025532.html advisory
- https://access.redhat.com/errata/RHSA-2026:9692 advisory
- https://linux.oracle.com/errata/ELSA-2026-9692.html advisory
- https://access.redhat.com/errata/RHSA-2026:10702 advisory
- https://errata.build.resf.org/RLSA-2026:9692 advisory
- https://errata.build.resf.org/RLSA-2026:10702 advisory
- https://access.redhat.com/errata/RHSA-2026:11329 advisory
- https://linux.oracle.com/errata/ELSA-2026-10702.html advisory
- https://lists.debian.org/debian-security-announce/2026/msg00142.html advisory
- https://lists.suse.com/pipermail/sle-security-updates/2026-April/025758.html advisory
…and 19 more