CVE-2026-28855

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-28855
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3. An app may be able to access protected user data.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://support.apple.com/en-us/126346 Vendor Advisory
https://support.apple.com/en-us/126348 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
History

26 Mar 2026, 20:12

Type Values Removed Values Added
References () https://support.apple.com/en-us/126346 - () https://support.apple.com/en-us/126346 - Vendor Advisory
References () https://support.apple.com/en-us/126348 - () https://support.apple.com/en-us/126348 - Vendor Advisory
Summary
  • (es) Se abordó un problema de permisos con restricciones adicionales. Este problema se corrigió en iOS 26.3 y iPadOS 26.3, macOS Tahoe 26.3. Una aplicación podría acceder a datos de usuario protegidos.
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
First Time Apple macos
Apple
Apple iphone Os
Apple ipados

25 Mar 2026, 21:16

Type Values Removed Values Added
CWE CWE-284
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

25 Mar 2026, 01:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-25 01:17

Updated : 2026-03-26 20:12

NVD link : CVE-2026-28855

Mitre link : CVE-2026-28855

CVE.ORG link : CVE-2026-28855

JSON object : View

Products Affected

apple

  • iphone_os
  • ipados
  • macos
CWE
CWE-284

Improper Access Control