Authorization Vulnerability in Apple iOS, iPadOS, macOS and watchOS Products
CVE-2026-28877

5.5MEDIUM

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos; Watch OS
Vendor: CVE Published:; 25 March 2026

What is CVE-2026-28877?

An authorization issue has been identified across several Apple platforms, allowing potential access to sensitive user data by malicious applications. The problem arose from inadequate state management processes, which have now been addressed in the latest updates. Users are encouraged to update their devices to ensure their data remains secure.

Affected Version(s)

iOS and iPadOS 0 < 26.4

macOS 0 < 15.7.5

macOS 0 < 26.4

References

https://support.apple.com/en-us/126792

https://support.apple.com/en-us/126794

https://support.apple.com/en-us/126795

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28877 Data

JSON