CVE-2026-28855

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access protected user data.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOS0 < 26.3affected
ApplemacOS0 < 26.3affected

Weaknesses

  • An app may be able to access protected user data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References