Information Leakage Vulnerability in Apple Products
CVE-2026-28870

5.5MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Visionos
Vendor
CVE Published:
25 March 2026

What is CVE-2026-28870?

An information leakage issue has led to potential unauthorized access to sensitive user data in various Apple operating systems. This vulnerability could allow applications to bypass security measures and access confidential information. The matter has been addressed with additional validation methods in the latest versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, enhancing the security and privacy protection for users.

Affected Version(s)

iOS and iPadOS 0 < 26.4

macOS 0 < 26.4

tvOS 0 < 26.4

References

https://support.apple.com/en-us/126792
https://support.apple.com/en-us/126794
https://support.apple.com/en-us/126797

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.