User Data Access Vulnerability in Apple iOS and macOS Products
CVE-2026-28993

Currently unrated

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; Visionos
Vendor: CVE Published:; 11 May 2026

What is CVE-2026-28993?

A vulnerability exists in Apple’s iOS and macOS systems that may permit unauthorized applications to access sensitive user data without proper consent. This issue has been mitigated by introducing an additional prompt that requires user confirmation before granting data access. Users should ensure their devices are updated to the latest versions to mitigate potential risks.

Affected Version(s)

iOS and iPadOS 0 < 18.7.9

iOS and iPadOS 0 < 26.5

macOS 0 < 14.8.7

References

https://support.apple.com/en-us/127110

https://support.apple.com/en-us/127111

https://support.apple.com/en-us/127115

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 11, 2026
Vulnerability Reserved
Mar 3, 2026

CVE-2026-28993 Data

JSON