CVE-2026-28962
Information Disclosure in Apple iOS and macOS
Publication date: 2026-05-11
Last updated on: 2026-05-11
Assigner: Apple Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| apple | ios | 18.7.9 |
| apple | ipados | 18.7.9 |
| apple | ios | 26.5 |
| apple | ipados | 26.5 |
| apple | macos_tahoe | 26.5 |
| apple | visionos | 26.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the processing of maliciously crafted web content that may lead to the disclosure of sensitive user information. It was addressed by improving access restrictions in various Apple operating systems including iOS, iPadOS, macOS Tahoe, and visionOS.
How can this vulnerability impact me? :
Exploitation of this vulnerability could result in sensitive user information being disclosed without authorization, potentially compromising user privacy and security.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update your Apple devices to the fixed versions: iOS 18.7.9 or 26.5, iPadOS 18.7.9 or 26.5, macOS Tahoe 26.5, or visionOS 26.5.
These updates include improved access restrictions that address the issue of processing maliciously crafted web content which may disclose sensitive user information.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability involves the potential disclosure of sensitive user information due to processing maliciously crafted web content. Such unauthorized disclosure of sensitive data could impact compliance with data protection regulations like GDPR and HIPAA, which require safeguarding personal and sensitive information against unauthorized access or leaks.
The issue was addressed by improved access restrictions and fixed in various Apple operating system versions, indicating a mitigation to reduce the risk of sensitive data exposure.