CVE-2026-28867 PUBLISHED CVSS 6.199999809265137 MEDIUM

This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to leak sensitive kernel state.

EPSS 0.05% · 14.0th percentile

Risk Scores

CVSS v3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.05%
14.0th percentile

Affected Products

VendorProductVersions
ApplemacOS0, 0
ApplevisionOS0
appleipados0, 26.0
AppleiOS and iPadOS0, 0
ApplewatchOS0
applewatchos0
appleiphone_os0, 26.0
applevisionos0
applemacos26.0, 15.0
appletvos0
AppletvOS0

Timeline

References

Open in Interactive Console →