CVEvulnerability
CVE-2026-28964
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-11
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-451
Description
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.
Affected configurations
• apple ipados (< 26.5)
• apple iphone os (< 26.5)
• apple visionos (< 26.5)
Related
Weakness · CWE (1)
- CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
References
- https://support.apple.com/en-us/127110 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/127120 Release Notes, Vendor Advisory