GHSA-gm8w-g7pf-24x5

GHSA-gm8w-g7pf-24x5 PUBLISHED CVSS 5.5 MEDIUM

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data.

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Timeline

Mar 25, 2026 CVE Published
Mar 26, 2026 CVE Updated
Apr 10, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-28877 advisory
https://support.apple.com/en-us/126792 url
https://support.apple.com/en-us/126794 url
https://support.apple.com/en-us/126795 url
https://support.apple.com/en-us/126798 url
https://support.apple.com/en-us/126799 url

Open in Interactive Console →