Authorization Vulnerability in Apple iOS, iPadOS, macOS and watchOS Products
CVE-2026-28877
5.5MEDIUM
Key Information:
- Vendor
Apple
- Vendor
- CVE Published:
- 25 March 2026
What is CVE-2026-28877?
An authorization issue has been identified across several Apple platforms, allowing potential access to sensitive user data by malicious applications. The problem arose from inadequate state management processes, which have now been addressed in the latest updates. Users are encouraged to update their devices to ensure their data remains secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
iOS and iPadOS 0 < 26.4
macOS 0 < 15.7.5
macOS 0 < 26.4