This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/127110 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/127115 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/127120 | Release Notes Vendor Advisory |
| https://support.apple.com/en-us/127121 |
Configurations
Configuration 1 (hide)
|
History
13 May 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) This issue was addressed with improved data protection. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5. An app may be able to access sensitive user data. | |
| References |
|
12 May 2026, 17:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| First Time |
Apple iphone Os
Apple visionos Apple Apple macos Apple ipados |
|
| References | () https://support.apple.com/en-us/127110 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/127115 - Release Notes, Vendor Advisory | |
| References | () https://support.apple.com/en-us/127120 - Release Notes, Vendor Advisory |
12 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
11 May 2026, 21:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-11 21:18
Updated : 2026-05-13 21:16
NVD link : CVE-2026-28958
Mitre link : CVE-2026-28958
CVE.ORG link : CVE-2026-28958
JSON object : View
Products Affected
apple
- ipados
- visionos
- macos
- iphone_os
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor