CVEvulnerability
CVE-2026-28863
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-03-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-284
Description
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to fingerprint the user.
Affected configurations
• apple ipados (< 26.4)
• apple iphone os (< 26.4)
• apple tvos (< 26.4)
• apple visionos (< 26.4)
• apple watchos (< 26.4)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://support.apple.com/en-us/126792 Vendor Advisory
- https://support.apple.com/en-us/126797 Vendor Advisory
- https://support.apple.com/en-us/126798 Vendor Advisory
- https://support.apple.com/en-us/126799 Vendor Advisory