Exploitation observed; activity peaked at 3 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to leak sensitive kernel state.
Priority
CRITICAL
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-25 | 2 | General1Patch1 |
| 2026-03-29 | 2 | Patch2 |
| 2026-04-02 | 1 | Disclosure1 |
| 2026-04-15 | 1 | General1 |
| 2026-07-05 | 3 | Active Exploitation1PoC2 |
| 2026-07-26 | 1 | Disclosure1 |
Here’s the PoC of CVE-2026-28867! Finally recovered from an old backup after 90 days of responsible disclosure.
Post summary
The post announces a Proof of Concept for CVE-2026-28867 following a 90‑day responsible disclosure, but provides no exploit code, patch, or technical details.
CVE-2026-28867 was also assigned to mDNSResponder by leaking TCP data in iOS 18.7.7. The same CVE got two different topics! https://t.co/0zDyiQA4Aq
Post summary
The tweet reports that CVE-2026-28867 is linked to mDNSResponder in iOS 18.7.7, noting that the CVE has multiple discussion topics but offers no PoC, exploits, or mitigation info.
https://github.com/speedyfriend433/CVE-2026-28867-PoC/blob/main/poc.c
Post summary
The content links to a GitHub repository that hosts a Proof of Concept (poc.c) for CVE‑2026‑28867, providing exploit code but no information about patches, active exploitation, or technical details.
@alencristen I just gave them my 3 Apple CVEs (CVE-2025-46280, CVE-2026-20654, CVE-2026-28867) and my GitHub profile for responsible disclosures
Post summary
The user indicates they have submitted three Apple CVEs for responsible disclosure and provided their GitHub profile for vendor contact.
🍎 CVE-2026-28867 (Apple iOS/macOS/tvOS/watchOS 2026): App leaks sensitive kernel state; improved auth fixes. Patch all! https://nvd.nist.gov/vuln/detail/CVE-2026-28867
Post summary
The tweet announces CVE‑2026‑28867, notes a kernel‑state leak in Apple apps, and urges users across all Apple platforms to apply the patch.
🔴 CVE-2026-28867 (Apple iOS/macOS/tvOS up to recent): Improved auth fixes app sensitive data leak. Patch all Apple devices ASAP! https://nvd.nist.gov/vuln/detail/CVE-2026-28867
Post summary
Apple highlights a data‑leak vulnerability (CVE‑2026‑28867) affecting iOS/macOS/tvOS and urges users to apply patches immediately.
⚠️ HIGH — CVE-2026-28867 This issue was addressed with improved authentication. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 an… EPSS 0.00 (12th pctl) ⚡ Exploit in the wild Full analysis → https://sec.kaitan.id/cves/CVE-2026-28867 #Apple #CyberSecurity #InfoSec
Post summary
The post confirms that CVE‑2026‑28867 is actively exploited in the wild, is mitigated by recent OS releases, and provides a link to a detailed analysis, but offers no PoC, exploit code, or deep technical details.
⚡ New CVE Alert: CVE-2026-28867 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-28867 #CVE-2026-28867 #CVE #CyberSecurity #InfoSec https://t.co/4u1JN40vxo
Post summary
The tweet announces a new CVE (CVE-2026-28867) with minimal details, lacking information on exploitation, technical specifics, or mitigation.
🚨 Apple users, critical vulnerability CVE-2026-28867 exposed kernel state leaks! 🖥️ Update your devices NOW to prevent privilege escalation and deeper exploitation. Don’t risk your security! 🔒 Learn more here: https://www.tenable.com/cve/CVE-2026-28867 #CyberSecurity #AppleSecurity #InfoSec
Post summary
The tweet warns Apple users about CVE‑2026‑28867, a kernel state leak that could enable privilege escalation, and urges immediate system updates to mitigate the risk.
CVE-2026-28867 Kernel State Information Disclosure Vulnerability in Apple Operating Systems https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28867
Post summary
The announcement references CVE‑2026‑28867 as a kernel state information disclosure issue in Apple OS, but provides no additional technical details, PoC, or exploitation evidence.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | ipados | - | - | - |
| OS | apple | iphone_os | - | - | - |
| OS | apple | macos | - | - | - |
| OS | apple | tvos | - | - | - |
| OS | apple | visionos | - | - | - |
| OS | apple | watchos | - | - | - |