VDB
CVE-2026-28873
CVE-2026-28873
PUBLISHED
This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. An app may be able to circumvent App Privacy Report logging.
EPSS 0.04% · 11.8th percentile
Risk Scores
EPSS Score
0.04%
11.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | 0, 0 |
Timeline
- May 11, 2026 CVE Published
- May 12, 2026 Security Advisory
- May 13, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
References
- https://support.apple.com/en-us/126792 url
- https://support.apple.com/en-us/127111 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-28873 advisory
- https://support.apple.com/en-us/127114 advisory
- https://support.apple.com/en-us/127117 advisory
- https://support.apple.com/en-us/127115 advisory
- https://support.apple.com/en-us/127118 advisory
- https://support.apple.com/en-us/127110 advisory
- https://support.apple.com/en-us/127113 advisory
- https://support.apple.com/en-us/127116 advisory
- https://support.apple.com/en-us/127119 advisory
- https://support.apple.com/en-us/127120 advisory
- https://support.apple.com/en-us/127112 advisory