App Enumeration Vulnerability in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS
CVE-2026-28882

4MEDIUM

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Visionos
Vendor
CVE Published:
25 March 2026

What is CVE-2026-28882?

An issue has been identified in several Apple operating systems that allows a malicious application to enumerate and access a list of installed apps on a user's device. This could potentially expose sensitive user information and create privacy concerns. Apple addressed this vulnerability in the latest updates for iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, enhancing security checks to mitigate the risk.

Affected Version(s)

iOS and iPadOS 0 < 26.4

macOS 0 < 26.4

tvOS 0 < 26.4

References

https://support.apple.com/en-us/126792
https://support.apple.com/en-us/126794
https://support.apple.com/en-us/126797

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.