CVE-2026-28950

Katalog CVE

CVSS 6.2 · Medium EPSS 0,19%

Kerentanan Exposure of Private Personal Information to an Unauthorized Actor pada apple ipados, apple iphone os. Skor CVSS 3.1 6.2 (Medium) menurut CISA ADP.

Deskripsi (NVD)

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS 26.4.2 and iPadOS 26.4.2, iPadOS 17.7.11. Notifications marked for deletion could be unexpectedly retained on the device.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.2 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/127002 release notes · advisory vendor
• https://support.apple.com/en-us/127003 release notes · advisory vendor
• https://support.apple.com/en-us/127112
• https://support.apple.com/en-us/127113
• https://support.apple.com/en-us/127114
• http://seclists.org/fulldisclosure/2026/Apr/14
• http://seclists.org/fulldisclosure/2026/Apr/15
• http://seclists.org/fulldisclosure/2026/May/10
• http://seclists.org/fulldisclosure/2026/May/8
• http://seclists.org/fulldisclosure/2026/May/9