VDB
GHSA-gm8w-g7pf-24x5
GHSA-gm8w-g7pf-24x5
PUBLISHED
CVSS 5.5 MEDIUM
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
- Mar 25, 2026 CVE Published
- May 1, 2026 Security Advisory
- May 11, 2026 CVE Updated
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-28877 advisory
- https://support.apple.com/en-us/126792 url
- https://support.apple.com/en-us/126798 url
- https://support.apple.com/en-us/126799 url
- https://support.apple.com/en-us/126794 url
- https://support.apple.com/en-us/126795 url
- https://support.apple.com/en-us/126796 url
- https://support.apple.com/en-us/127111 url