CVEFinder.io

CVE-2026-28873

⚠️ high
🔍 Scan for this CVE
Summary

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. An app may be able to circumvent App Privacy Report logging.

CVSS Score
7.5
High
EPSS Score
0.0
Exploit Probability
Published Date
2026-05-11
First Seen: 2026-05-12
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 67.7% of all 361,609 vulnerabilities in our database.

#116,654
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 13, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-05-14
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-863

📦 Affected Products 4

Vendor Product Status Affected Versions
apple iphone_os Affected
< 18.7.9
apple iphone_os Affected
> 26.0 < 26.4
apple ipados Affected
< 18.7.9
apple ipados Affected
> 26.0 < 26.4

🔗 References 2

https://support.apple.com/en-us/126792
Release Notes Vendor Advisory
https://support.apple.com/en-us/127111
Release Notes Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-20683 ⚠️ high 7.1 0.2 An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS... 2026-09-14
CVE-2026-28935 ⚠️ high 7.5 0.4 The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi... 2026-09-14
CVE-2026-28938 ⚠️ high 7.5 0.3 A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be a... 2026-09-14
CVE-2026-28960 ⚠️ high 7.5 0.4 A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10.... 2026-09-14
CVE-2026-28966 🔶 medium 4.3 0.4 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.... 2026-09-14
CVE-2026-28968 🔶 medium 5.5 0.2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.... 2026-09-14
These CVEs affect the same products