Permissions Flaw in Apple iOS, iPadOS, tvOS, visionOS, and watchOS Products
CVE-2026-28863

6.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
TV OS
Visionos
Watch OS
Vendor
CVE Published:
25 March 2026

What is CVE-2026-28863?

A permissions issue exists in Apple's iOS, iPadOS, tvOS, visionOS, and watchOS products. This vulnerability, which could potentially allow applications to fingerprint users, has been addressed with additional restrictions in the recent updates (iOS 26.4, iPadOS 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4). Users are encouraged to update their devices promptly to enhance their security.

Affected Version(s)

iOS and iPadOS 0 < 26.4

tvOS 0 < 26.4

visionOS 0 < 26.4

References

https://support.apple.com/en-us/126792
https://support.apple.com/en-us/126797
https://support.apple.com/en-us/126798

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.