CVEvulnerability
CVE-2026-28950
6.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-04-22
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-359
Description
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.
Affected configurations
• apple ipados (< 18.7.8)
• apple ipados (>= 26.0 < 26.4.2)
• apple iphone os (< 18.7.8)
• apple iphone os (>= 26.0 < 26.4.2)
Related
Weakness · CWE (1)
- CWE-359 Exposure of Private Personal Information to an Unauthorized Actor weakness
References
- https://support.apple.com/en-us/127002 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/127003 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/127112 support.apple.com
- https://support.apple.com/en-us/127113 support.apple.com
- https://support.apple.com/en-us/127114 support.apple.com
- http://seclists.org/fulldisclosure/2026/Apr/14 seclists.org
- http://seclists.org/fulldisclosure/2026/Apr/15 seclists.org
- http://seclists.org/fulldisclosure/2026/May/10 seclists.org
- http://seclists.org/fulldisclosure/2026/May/8 seclists.org
- http://seclists.org/fulldisclosure/2026/May/9 seclists.org