CVE-2026-28877Patch(apple / ipados)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apple ipados systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may be able to access sensitive user data.

apple CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
visionos

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

apple

Products

ipadosiphone_osmacosvisionoswatchos

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://paradisefacade.com/blog/2026/3/9/how-to-fingerprint-users

Full discourse1 post

Rosyna Keller@rosyna197d
Patch
I updated the “Device Name” section of my “How to Fingerprint Users on iOS” article to note that iOS 26.4 fixes CVE-2026-28877, which leaked the real, user-set device name without needing the proper entitlement. https://paradisefacade.com/blog/2026/3/9/how-to-fingerprint-users
Post summary
The post announces that iOS 26.4 includes a fix for CVE‑2026‑28877, which previously allowed the device name to be leaked without proper entitlement.
010105692
1.9K followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
OS	apple	visionos	-	-	-
OS	apple	watchos	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities