CVE-2026-28964

HighCVSS 7.5

Published: 11/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

An inconsistent user interface issue was addressed with improved state management. An app may be able to access sensitive user data.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive user data, potentially leading to privacy breaches.

Recommendation

It is recommended to update to iOS 26.5, iPadOS 26.5, or visionOS 26.5 to mitigate this vulnerability.

Other vulnerabilities in iOS, iPadOS, visionOS

CVE-2025-43439Medium
A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.

Original NVD description (English source)

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS