Authorization Vulnerability in Apple iOS, iPadOS, macOS and watchOS Products
CVE-2026-28877

5.5MEDIUM

Key Information:

Vendor

Apple

Vendor
CVE Published:
25 March 2026

What is CVE-2026-28877?

An authorization issue has been identified across several Apple platforms, allowing potential access to sensitive user data by malicious applications. The problem arose from inadequate state management processes, which have now been addressed in the latest updates. Users are encouraged to update their devices to ensure their data remains secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

iOS and iPadOS 0 < 26.4

macOS 0 < 15.7.5

macOS 0 < 26.4

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.